WEDNESDAY,  JULY  9,  1975 
WASHINGTON,  D.C. 


Volume  40  ■  Number  132 

PART  III 


OFFICE  OF 
MANAGEMENT 
AND  BUDGET 


PRIVACY  ACT 
IMPLEMENTATION 

Guidelines  and  Responsibilities 


28948 


NOTICES 


OFFICE  OF  MANAGEMENT  AND 
BUDGET 

[Circular  No.  A-108] 

HEADS  OF  EXECUTIVE  DEPARTMENTS 
AND  ESTABLISHMENTS 

Responsibilities  for  the  Maintenance  of 

Records  About  Individuals  by  Federal 

Agencies 

1.  Purpose.  This  Circular  defines  re¬ 
sponsibilities  for  implementing  the  Pri¬ 
vacy  Act  of  1974  (Public  Law  No.  93-579, 
5  U.S.C.  552a)  to  assure  that  personal 
information  about  individuals  collected 
by  Federal  agencies  is  limited  to  that 
which  is  legally  authorized  and  necessary 
and  is  maintained  in  a  manner  which 
precludes  unwarranted  intrusions  upon 
individual  privacy. 

2.  Background,  a.  The  Privacy  Act  of 
1974,  approved  December  31,  1974,  set 
forth  a  series  of  requirements  governing 
Federal  agency  personal  record-keeping 
practices. 

b.  The  Act  places  the  principal  respon¬ 
sibility  for  compliance  with  its  provi¬ 
sions  on  Federal  agencies  but  also  pro¬ 
vides  that  the  Office  of  Management  and 
Budget  shall  “develop  guidelines  and 
regulations  .  .  .  and  provide  continuing 
assistance  to  and  oversight  of  the  im¬ 
plementation  of  the  .  .  .”  operative  pro¬ 
visions  of  the  Act  by  the  agencies. 

3.  Definitions.  For  the  purpose  of  this 
Circular: 

(1)  the  term  “agency”  means  agency  as 
defined  in  section  552(e)  of  this  title;  ("The 
term  agency  includes  any  executive  depart¬ 
ment,  mUitary  department,  Government  cor¬ 
poration.  Government  controlled  corporation 
or  other  establishment  in  the  executive 
branch  of  the  Government  (including  the 
Executive  Office  of  the  President,  or  any  in¬ 
dependent  regulatory  agency.”  (5  U.S.C.  552 

(e) ) > ) : 

(2)  the  term  “individual”  means  a  citizen 
of  the  United  States  or  an  alien  lawfully  ad¬ 
mitted  for  permanent  residence; 

(3)  the  term  “maintain”  includes  main¬ 
tain,  collect,  use,  or  disseminate; 

(4)  the  term  “record”  means  any  item,  col¬ 
lection,  or  grouping  of  information  about  an 
individual  that  is  maintained  by  an  agency, 
including,  but  not  limited  to,  his  education, 
financial  transactions,  medical  history,  and 
criminal  or  employment  history  and  that 
contains  his  name,  or  identifying  number, 
symbol,  or  other  identifying  particular  as¬ 
signed  to  the  individual,  such  as  a  finger  or 
voice  print  or  a  photograph;  and 

(5)  the  term  “system  of  records"  means  a 
group  of  any  records  under  the  control  of  any 
agency  from  which  information  is  retrieved 
by  the  name  of  the  individual  or  by  some 
identifying  number,  symbol,  or  other  identi¬ 
fying  particular  assigned  to  the  individual. 

(5  U.S.C.  552a(a) ) 

4.  Coverage,  a.  This  Circular  applies  to 
all  agencies  as  defined  in  the  Act. 

b.  It  applies  to  all  agency  activities 
related  to  the  maintenance  of  systems  of 
records  subject  to  the  Act;  i.e.,  group¬ 
ings  of  personal  data  about  identifiable 
individuals.  See  definitions  paragraph  3, 
above. 

5.  Responsibilities,  a.  Each  agency 
head  shall  establish  and  maintain  pro¬ 
cedures,  consistent  with  the  Act,  OMB 
guidelines,*  and  related  directives  is¬ 
sued  pursuant  to  this  Circular,  to 


(1)  Identify  each  system  of  records 
which  the  agency  maintains  and  review 
the  content  of  the  system  to  assure  that 
only  that  Information  is  maintained 
which  is  necessary  and  relevant  to  a 
function  which  the  agency  is  authorized 
to  perform  by  law  or  executive  order  (5 
U.S.C.  552a (e)  (1) )  and  that  no  informa¬ 
tion  about  the  political  or  religious  be¬ 
liefs  and  activities  of  individuals  is 
maintained  except  as  provided  in  5  U.S.C. 
552a(e) (7> . 

2.  Prepare  and  publish  a  public  no¬ 
tice  of  the  existence  and  character  of 
those  systems  consistent  with  guidance 
on  format  issued  by  GSA.  See  5  U.S.C. 
552a(e) (4)  and  (11). 

<3)  Collect  information  which  may  re¬ 
sult  in  an  adverse  determination  about 
an  individual  from  that  individual  wher¬ 
ever  practicable  (5  U.S.C.  552a(e)(2)) 
and  inform  individuals  from  whom  in¬ 
formation  about  themselves  is  collected 
of  the  purposes  for  which  the  informa¬ 
tion  will  be  used  and  their  rights,  bene¬ 
fits,  or  obligations  with  respect  to  sup¬ 
plying  that  data  (5  U.S.C.  552a(e)(3)). 

(4)  Revise  any  personal  data  collection 
forms  or  processes  which  they  may  pre¬ 
scribe  for  use  by  other  agencies  (e.g., 
standard  forms)  to  conform  to  the  re¬ 
quirements  of  5  U.S.C.  552a(e)(3). 
(Agencies  which  use  such  forms  to  col¬ 
lect  information  are  nevertheless  re¬ 
sponsible  for  assuring  that  individuals 
from  whom  information  about  them¬ 
selves  is  solicited  are  advised  of  their 
rights  and  obligations.) 

(5)  Establish  reasonable  administra¬ 
tive,  technical,  and  physical  safeguards 
to  assure  that  records  are  disclosed  only 
to  those  who  are  authorized  to  have  ac¬ 
cess  and  otherwise  “to  protect  against 
any  anticipated  threats  or  hazards  to 
their  security  or  integrity  which  could 
result  in  substantial  harm,  embarrass¬ 
ment,  inconvenience,  or  unfairness  to 
any  individual  on  whom  information  is 
maintained.”  See  5  U.S.C.  552a  (b),  and 
(e) (10). 

<6>  Maintain  an  accounting  of  all  dis¬ 
closures  of  information  from  systems  of 
records  except  those  to  personnel  within 
the  agency  who  have  an  official  need  to 
know'  or  to  the  public  under  the  Freedom 
of  Information  Act,  and  make  that  ac¬ 
counting  available  as  provided  in  5  U.S.C. 
552a^c>  (1),  (2),  and  (3).. 

<7)  When  using  a  record  or  disclosing 
it  to  someone  other  than  an  agency,  as¬ 
sure  that  it  is  as  accurate,  relevant, 
timely  and  complete  as  is  reasonably 
necessary  to  assure  fairness  to  the  indi¬ 
vidual.  See  5  U.S.C.  552a(e)  (5)  and  (6). 

(8)  Permit  individuals  to  have  access 
to  records  pertaining  to  themselves  and 
to  have  an  opportunity  to  request  that 
such  records  be  amended.  See  5  U.S.C. 
552a(d)(l),  (2>,  and  (3). 

(9)  Inform  prtor  recipients  when  a 
record  is  amended  pursuant  to  the  re¬ 
quest  of  an  individual  or  a  statement 
of  disagreement  has  been  filed,  advise 
any  subsequent  recipient  that  a  record  is 
disputed,  and  provide  a  copy  of  the 
statement  of  disagreement  to  both  prior 
and  subsequent  recipients  of  the  dis¬ 
puted  information.  See  5  U.S.C.  552a  (c) 
(4)  and  (d)  (4). 


(10)  Publish  rules  describing  agency 
procedures  developed  pursuant  to  the 
Act  and  describing  any  systems  which 
are  proposed  to  be  exempted  from  pro¬ 
visions  of  the  Act  including  the  reasons 
for  the  proposed  exemption  consistent 
with  guidance  on  format  issued  by  GSA. 
See  5  U.S.C.  552a(f>,  (j),  and  (k). 

(11)  Review  all  agency  contracts  which 
provide  for  the  maintenance  of  systems 
of  records  by  or  on  behalf  of  the  agency 
to  accomplish  an  agency  function  to  as¬ 
sure  that,  where  appropriate  and  within 
the  agency’s  authority,  language  is  in¬ 
cluded  which  provides  that  such  systems 
will  be  maintained  in  a  manner  con¬ 
sistent  with  the  Act.  See  5  U.S.C.  552a 
(m). 

(12)  Refrain  from  renting  or  selling 
lists  of  names  and  addresses  unless  spe¬ 
cifically  authorized  by  law.  See  5  U.S.C. 
552a(n) . 

(13)  Prepare  and  submit  to  the  Office 
of  Management  and  Budget  and  to  the 
Congress  a  report  of  any  proposal  to  es¬ 
tablish  or  alter  a  system  of  records  in  a 
form  consistent  with  guidance  on  con¬ 
tent,  format  and  timing  issued  by  OMB. 
See  5  U.S.C.  552a(o). 

(14)  Prepare  and  submit  to  the  Office 
of  Management  and  Budget,  on  or  before 
April  30  of  each  year,  a  report  of  its 
activities  under  the  Act  consistent  with 
guidance  on  content  and  format  issued 
by  OMB.  See  5  U.S.C.  552a(p) . 

(15)  Conduct  training  for  all  agency 
personnel  who  are  in  any  way  involved 
in  maintaining  systems  of  records  to  ap¬ 
prise  them  of  their  responsibilities  under 
the  Act  and  to  indoctrinate  them  with 
respect  to  procedures  established  by  the 
agency  to  implement  the  Act.  See  5  U.S.C. 
552a(e) (9) . 

(16)  Establish  a  program  for  periodi¬ 
cally  reviewing  agency  record-keeping 
policies  and  practices  to  assure  compli¬ 
ance  with  the  Act. 

b.  The  Secretary  of  Commerce  shall, 
consistent  with  guidelines  issued  by 
OMB,  issue  standards  and  guidelines  on 
computer  and  data  security. 

c.  The  Administrator  of  General  Serv¬ 
ices  shall,  consistent  with  guidelines  is¬ 
sued  by  OMB: 

(1)  Issue  instructions  on  the  format 
and  timing  of  agency  notices  and  rules 
required  to  be  published  under  the  Act. 
See  5  U.S.C.  552a  (e)  (4)  and  (f). 

(2)  Not  later  than  November  30,  1975 
ahd  annually  thereafter  compile  and 
publish  a  compendium  of  agency  rules 
and  notices  and  make  that  publication 
available  to  the  public  at  low  cost.  See  5 
U.S.C.  552a  (f). 

(3)  Issue  and/or  revise  procedures 
governing  the  transfer  of  records  to  Fed¬ 
eral  Records  Centers  for  storage, 
processing,  and  servicing  pursuant  to  44 
U.S.C.  3103  to  ensure  that  such  records 
are  not  disclosed  except  to  the  agency 
which  maintains  the  records,  or  under 
rules  established  by  that  agency  which 
are  not  inconsistent  writh  the  provisions 
of  the  Act.  It  should  be  noted  that,  for 
purposes  of  the  Act,  such  records  are 
considered  to  be  maintained  by  the 
agency  which  deposited  them.  See  5 
U.S.C.  552a(l)  (1) . 
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(4)  Establish  procedures  to  assure 
that  records  transferred  to  the  National 
Archives  of  the  United  States  pursuant 
to  44  U.S.C.  2103,  are  properly  safe¬ 
guarded  and  that  public  notices  of  the 
existence  and  character  of  such  records 
are  issued  in  conformance  with  5  U.S.C. 
552a  (1),  (2),  and  (3). 

(5)  Revise  procedures  governing  the 
clearance  of  interagency  data  collection 
forms  for  which  it  is  responsible  to  as¬ 
sure  that  those  requesting  information 
from  individuals  are  revised  in  conform¬ 
ance  with  5  U.S.C.  552a (e)  (3). 

(6)  Revise  procurement  guidance  to 
incorporate  language  consistent  with  5 
U.S.C.  552a(m) ;  i.e.,  to  provide  that  con¬ 
tracts  which  provide  for  the  maintenance 
of  a  system  of  records  by  or  on  behalf  of 
an  agency  to  accomplish  an  agency  func¬ 
tion  includes  language  which  assures  that 
such  system  will  be  maintained  in  con¬ 
formance  with  the  Act. 

(7)  Revise  computer  and  telecommu¬ 
nications  procurement  policies  to  provide 
that  agencies  must  review  all  proposed 
equipment  and  services  procurements  to 
assure  compliance  with  applicable  provi¬ 
sions  of  the  Act;  e.g.,  Report  on  New 
Systems. 

d.  The  Civil  Service  Commission  shall, 
consistent  with  guidelines  issued  by 
OMB: 

(1)  Revise  civilian  personnel  informa¬ 
tion  processing  and  record-keeping  di¬ 
rectives  to  bring  them  into  conformance 
with  the  Act.  - 

(2)  Devise  and  conduct  training  pro¬ 
grams  for  agency  personnel  including 
both  the  conduct  of  courses  in  various 
substantive  areas  (e.g.,  legal,  adminis¬ 
trative,  ADP)  and  the  development  of 
materials  which  agencies  can  use  in  their 
own  courses. 

e.  The  Director  of  the  Office  of  Tele¬ 
communications  Policy  shall,  consistent 
with  guidelines  issued  by  OMB,  issue 
and/or  revise  policies  governing  govern¬ 
ment  data  telecommunications  consist¬ 
ent  with  the  Privacy  Act. 

f.  The  Director  of  the  Office  of  Man¬ 
agement  and  Budget  will: 

(1)  Issue  guidelines  and  regulations  to 
the  agencies  to  implement  the  Act.  While 
the  application  of  the  requirements  of 
the  Act  is  the  agepcy’s  responsibility,  in¬ 
terpretive  guidelines  have  been  devised 
to: 

Assist  agencies  in  interpreting  the  re¬ 
quirements  of  the  Act; 

Establish  minimum  standards  or  cri¬ 
teria,  where  appropriate,  in  applying  the 
Act; 

Provide  illustrative  examples  of  the 
application  of  the  Act;  and 

Assure  a  uniform  and  constructive  im¬ 
plementation  of  the  Act. 

(2)  Provide  assistance,  upon  request, 
to  agencies. 

(3)  Review  proposed  new  systems  or 
changes  to  existing  systems. 

(4)  Compile  the  annual  report  to  the 
Congress  on  agency  activities  to  comply 
with  the  Act  in  accordance  with  5  U.S.C. 
552a(p) . 

(5)  Revise  procedures  governing  the 
clearance  of  data  collection  forms  and 
reports  for  which  it  is  responsible  to  as¬ 


sure  that  those  requesting  information 
about  individuals  are  revised  In  con¬ 
formance  with  5  U.S.C.  552a(e)  (3) . 

6.  Reports.  Agencies  are  required  to 
submit  the  following  reports  consistent 
with  guidance  on  format,  content,  and 
timing  to  be  issued  under  separate  trans¬ 
mittal. 

a.  Reports  on  new  systems  to  the  Con¬ 
gress,  OMB,  and,  for  the  period  of  its 
existence,  the  Privacy  Protection  Study 
Commission.  Reports  shall  be  submitted 
not  later  than  60  days  prior  to  the  estab¬ 
lishment  of  a  new  system  or  the  imple¬ 
mentation  of  a  change  to  an  existing 
system. 

b.  Annual  report  on  agency  activities 
to  comply  with  5  U.S.C.  552a  to  OMB 
not  later  than  April  30  of  each  year. 

7.  Effective  Date.  The  provisions  of 
this  Circular  are  effective  on  September 
27,  1975  except  that: 

a.  Reports  on  new  systems  which  cover 
the  implementation  of  new  or  altered 
systems  of  records  proposed  to  be  effec¬ 
tive  after  September  27,  1975  shall  be 
submitted  not  later  than  60  days  before 
the  effective  date  of  those  new  systems 
or  changes;  and 

b.  Rules  and  notices  prescribed  by  the 
Act  and  regulations  and  guidelines  to  be 
issued  by  the  responsible  agencies  shall 
be  issued  in  advance  of  the  effective  date 
where  required  by  law  (e.g.,  the  Admin¬ 
istrative  Procedures  Act,  5  U.S.C.  553) 
or  as  otherwise  necessary  to  permit 
timely  and  effective  compliance. 

8.  Inquiries.  Inquiries  concerning  this 
Circular  may  be  addressed  to  the  Infor¬ 
mation  Systems  Division,  Office  of  Man¬ 
agement  and  Budget,  Room  9002,  NEOB, 
Washington,  D.C.,  20503,  telephone  202 
395-4814. 

James  T.  Lynn. 

Director. 

Note:  Each  agency  shall  order  sufficient 
quantities  of  the  OMB  guidelines  In  accord¬ 
ance  with  the  instructions  which  will  be 
provided  by  the  Federal  Register.  At  a  later 
date,  copies  will  be  available  for  sale  from 
the  Superintendent  of  Documents,  U  S.  Gov¬ 
ernment  Printing  Office,  Washington,  D.C.  ~ 
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Implementation  of  Section  552a  of  Title  5 
of  the  United  States  Code 


1  Section  3  of  the  Privacy  Act  of  1974,  Pub. 
L.  93-579. 
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Provide  Protective  Services. 

(4)  Exemption  for  Statistical  Records. 

(5)  Exemption  for  Investigatory  Material 
Compiled  for  Determining  Suitability  for 
Federal  Employment  or  Military  Service. 

(6)  Exemption  for  Testing  or  Examination 
Material. 

(7)  Exemption  for  Material  used  to  Evalu¬ 
ate  Potential  for  Promotion  in  the  Armed 
Services. 

(1)  ARCHIVAL  RECORDS. 

(1)  Records  Stored  in  GSA  Records 
Centers. 

(2)  Records  Archived  Prior  to  Septem¬ 
ber  27,  1975. 

(3)  Records  Archived  on  or  after  Septem¬ 
ber  27,  1975. 

(m)  GOVERNMENT  CONTRACTORS. 

(n)  MAILING  LISTS. 

(o)  REPORT  ON  NEW  SYSTEMS. 

(p)  ANNUAL  REPORT. 

(q)  EFFECT  OF  OTHER  LAWS. 
Subsection  (a)  Definitions 

Subsection  (a)  “For  purposes  of  this 
section — ” 

Agency.  Subsection  (a)  (1)  “The  term 
‘agency’  means  agency  as  defined  in  sec¬ 
tion  552(e)  of  this  title;** 

The  definition  of  “agency”  is  the  same 
as  that  used  in  the  Administrative  Pro¬ 
cedures  Act  as  modified  by  the  recently 
enacted  Freedom  of  Information  Act 
amendments  (Pub.  L.  93-502) :  “  ‘agency* 
means  each  authority  of  the  Government 
of  the  United  States,  whether  or  not  it  is 
within  or  subject  to  review  by  another 
agency  ...”  (5  U.S.C.  551(D).  “tTlhe 
term  agency  •  •  •  includes  any  execu¬ 
tive  department,  military  department. 
Government  corporation,  Government 
controlled  corporation  or  other  estab¬ 
lishment  in  the  executive  branch  of  the 
Government  (including  the  Executive 
Office  of  the  President),  or  any  inde¬ 
pendent  regulatory  agency.*’  (5  U.S.C. 
552(e)  as  added  by  Pub.  L.  93-502) 

Two  aspects  of  this  definition  require 
further  explanation; 

The  scope  of  the  term;  l.e.,  what  enti¬ 
ties  are  covered,  how  has  the  definition 
of  agency  been  broadened  to  encompass 
additional  organizations  as  a  result  of 
the  FOIA  amendments? 

Whether  or  not  entities  within  an 
agency  are  to  be  considered  agencies. 
This  is  particularly  significant  in  apply¬ 


ing  subsection  (b)(1),  in  determining 
what  constitutes  an  interagency  trans¬ 
fer. 

The  first  question — the  scope  of  the 
definition — is  covered  in  the  House  re¬ 
port  on  the  FOIA  amendments  quoted 
below,  as  modified  by  the  conference  re¬ 
port  language  set  out  thereafter: 

For  the  purposes  of  this  section,  the  defi¬ 
nition  of  'agency”  has  been  expanded  to  in¬ 
clude  those  entities  which  may  not  be  con¬ 
sidered  agencies  under  section  551(1)  of  title 
5,  U.S.  Code,  but  which  perform  governmental 
functions  and  control  information  of  inter¬ 
est  to  the  public.  The  bill  expands  the  defi¬ 
nition  of  ‘‘agency”  for  purposes  of  section 
552,  |and  552a|  title  5,  United  States  Code. 
Its  effect  is  to  insure  inclusion  under  the 
Act  of  Government  corporations.  Govern¬ 
ment  controlled  corporations,  or  other  estab¬ 
lishments  within  the  executive  branch,  such 
as  the  U.S.  Postal  Service. 

The  term  “establishment  in  the  Executive 
Office  of  the  President,"  as  used  in  this 
amendment  means  such  functional  entities 
as  the  Office  of  Telecommunications  Policy, 
the  Office  of  Management  and  Budget,  the 
Council  of  Economic  Advisers,  the  National 
Security  Council,  the  Federal  Property  Coun¬ 
cil,  and  other  similar  establishments  which 
have  been  or  may  in  the  future  be  created  by 
Congress  through  statute  or  by  Executive 
order. 

The  term  ‘‘Government  corporation,”  as 
used  in  this  subsection,  would  include  a  cor¬ 
poration  that  is  a  wholly  Government-owned 
enterprsie,  established  by  Congress  through 
statute,  such  as  the  St.  Lawrence  Seaway 
Development  Corporation,  the  Federal  Crop 
Insurance  Corporation  (FCIC),  the  Tennes¬ 
see  Valley  Authority  (TVA),  and  the  Inter- 
American  Foundation. 

The  term  “Government  controlled  Corpo¬ 
ration.”  as  used  in  this  Bubsection,  would 
include  a  corporation  which  is  not  owned 
by  the  Federal  Government  •  *  •  (House 
Document  93-876,  pp.  8-9,  Report  on  the 
Freedom  of  Information  Act  amendments, 
HR.  12741). 

The  conferees  state  that  they  intend  to  in¬ 
clude  within  the  definition  of  “agency”  those 
entities  encompassed  by  5  U.S.C.  551  and 
other  entities  including  the  United  States 
Postal  Service,  the  Postal  Rate  Commission, 
and  government  corporations  or  government- 
controlled  corporations  now  In  existence  or 
which  may  be  created  in  the  future.  They  do 
not  intend  to  include  corporations  which  re¬ 
ceive  appropriated  funds  but  are  neither 
chartered  by  the  Federal  Government  nor 
controlled  by  it,  such  as  the  Corporation  for 
Public  Broadcasting.  Expansion  of  the  defi¬ 
nition  of  “agency"  In  this  subsection  is  in¬ 
tended  to  broaden  applicability  of  the  Free¬ 
dom  of  Information  Act  but  it  is  not  intend¬ 
ed  that  the  term  “agency”  be  applied  to  sub¬ 
divisions,  offices  or  units  within  an  agency. 

With  respect  to  the  meaning  of  the  term 
“Executive  Office  of  the  President”  the  con¬ 
ferees  intend  the  result  reached  in  Soucie  v. 
David,  448  F.  2d.  1067  (C.AJ5.C.  1971).  The 
term  is  not  to  be  interpreted  aa  including  the 
President’s  immediate  personal  staff  or  units 
in  the  Executive  Office  whose  sole  function 
Is  to  advise  and  assist  the  President.”  (House 
Report  93-1380,  p.  14-15.) 

Whether  or  not  an  agency  can  exist 
within  an  agency  is  a  somewhat  more 
complex  issue.  This  is  addressed,  in  part, 
in  the  above  quotation  from  the  confer¬ 
ence  report  language  in  the  statement 
“•  •  •  but  it  is  not  intended  that  the 
term  ‘agency’  be  applied  to  subdivisions, 
offices,  or  units  within  an  agency.”  The 
issue  was  also  addressed  in  debate  on 


HH.  16373  on  the  House  floor  in  a  state¬ 
ment  by  Congressman  Moorhead — “  *  *  * 
‘agency’  is  given  the  meaning  which  it 
carries  elsewhere  in  the  Freedom  of  In¬ 
formation  Act,  5  United  States  Code,  sec¬ 
tion  551(1) ,  as  amended  by  H.R.  12471  of 
this  Congress,  section  552(e),  on  which 
Congress  has  acted  to  override  the  veto. 
The  present  bill  is  intended  to  give  ‘agen¬ 
cy’  its  broadcast  statutory  meaning.  This 
will  permit  employees  and  officers  of  the 
agency  which  maintains  the  records  to 
have  access  to  such  records  if  they  have 
a  need  for  them  in  the  performance  of 
their  duties.  For  example,  within  the 
Justice  Department — which  is  an  agency 
under  the  bill — transfer  between  divi¬ 
sion  of  the  Department,  the  U.S.  Attor¬ 
ney’s  offices,  the  Parole  Board,  and  the 
Federal  Bureau  of  Investigation  would 
be  on  a  need-for-the-record  basis. 
Transfer  outside  the  Justice  Department 
to  other  agencies  would  be  more  specifi¬ 
cally  regulated.  Thus,  transfer  of  infor¬ 
mation  between  the  FBI  and  the  Crim¬ 
inal  Division  of  the  Justice  Department 
for  official  purposes  would  not  require 
additional  showing  or  authority,  in  con¬ 
trast  to  transfer  of  such  information 
from  the  FBI  to  the  Labor  Department.” 

( Congressional  Record  November  21, 

1974,  p.  H10962) 

In  addressing  this  question  the  Justice 
Department  has  advised  that 

•  *  •  it  Is  our  firm  view  that  the  1974 
I  FOIA]  Amendments  require  no  change  In 
the  original  Act,  that  It  Is  for  the  over-unit — 
the  Department  or  other  higher-level 
“agency”^ — to  determine  which  of  Its  substan¬ 
tially  Independent  components  will  function 
Independently  for  Freedom  of  Information 
Act  purposes.  Moreover,  as  the  Attorney  Gen¬ 
eral  noted  in  that  portion  of  his  Memoran¬ 
dum  dealing  with  the  subject,  “It  Is  some¬ 
times  permissible  to  make  the  determination 
differently  for  purposes  of  various  provisions 
of  the  Act — for  example,  to  publish  and 
maintain  an  index  at  the  overunit  level  while 
letting  the  appropriate  subunits  handle  re¬ 
quests  for  their  own  records.”  (Attorney  Gen¬ 
eral’s  Memorandum  on  the  1974  Amendments 
to  the  Freedom  of  Information  Act,  February, 

1975,  p.  26) .  In  our  view,  this  practice  of  giv¬ 
ing  variable  content  to  the  meaning  of  the 
word  “agency”  for  various  purposes  can  be 
appUed  to  the  Privacy  Act  as  well  as  the  Free¬ 
dom  of  Information  Act.  For  example,  it  may 
be  desirable  and  In  furtherance  of  the  pur¬ 
poses  of  the  Act  to  treat  the  various  compo¬ 
nents  of  a  Department  as  separate  “agencies” 
for  purposes  of  entertaining  applications  for 
access  and  ruling  upon  appeals  from  denials, 
while  treating  the  Department  as  the 
“agency”  for  purposes  of  those  provisions 
limiting  intragovernmental  exchange  of  rec¬ 
ords.  (Of  course,  dissemination  among  com¬ 
ponents  of  the  Department  must  still  be  only 
on  a  “need-to-know”  basis.  6  U.S.C.  552a(b) 
(1).)  Needless  to  say,  this  practice  must  not 
be  employed  Invidiously,  so  as  to  frustrate 
rather  than  to  further  the  purposes  of  the 
Act;  and  there  should  be  a  consistency  be¬ 
tween  the  practice  under  the  Privacy  Act 
and  the  practice  for  comparable  purposes 
under  the  Freedom  of  Information  Act.  For 
this  reason  it  seems  to  us  doubtful  (though 
not  entirely  impossible)  that  a  Department 
or  other  over-unit  which  has  treated  Its  com¬ 
ponents  as  separate  agencies  for  all  purposes 
under  the  Freedom  of  Information  Act  could 
successfully  maintain  that  all  of  its  compo¬ 
nents  can  be  considered  a  single  “agency” 
under  the  Privacy  Act,  simply  to  facilitate 
the  exchange  of  reoords  (Letter  from  Asslst- 
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ant  Attorney  General,  Office  of  Legal  Counsel, 

dated  April  14, 1975) 

In  addition  to  the  matter  of  deter¬ 
mining  when  a  component  of  an  agency 
is  to  be  considered  an  agency  itself  when 
the  entire  agency  is  to  be  treated  as  a 
single  entity,  the  issue  arises  as  to  wheth¬ 
er  an  entity  or  individual  serving  more 
than  one  agency  may  be  considered  an 
“employee”  of  each  agency  he  serves,  for 
certain  purposes.  While  this  is  not 
specifically  addressed  in  the  Act,  it  is 
reasonable  to  assume  that  members  of 
temporary  task  forces,  composed  of  per¬ 
sonnel  of  several  agencies,  should  usual¬ 
ly  be  considered  employees  of  the  lead 
agency  and  of  their  own  agency  for  pur¬ 
poses  of  access  to  information.  Similarly, 
members  of  permanent  “strike  forces” 
and  personnel  crossdesignated  to  serve 
the  functions  of  two  or  more  agencies 
should  usually  be  treated  as  employees 
of  both  the  lead  agency  and  their  own 
employing  agency,  e.g.,  employees  or 
State  or  local  officials  assigned  to  or¬ 
ganized  crime,  and  customs  officers  cross 
designated  to  perfrom  each  others  func¬ 
tions. 

Individual.  Subsection  (a)  (2)  “The 
term  ‘individual’  means  a  citizen  of  the 
United  States  or  an  alien  lawfully  ad¬ 
mitted  for  permanent  residence;” 

This  definition  is  intended  to  “distin-. 
guish  between  the  rights  which  are  given 
to  the  citizen  as  an  Individual  under  this 
Act  and  the  rights  of  proprietorships, 
businesses,  and  corporations  which  are 
not  intended  to  be  covered  by  this  Act. 
This  distinction  was  to  insure  that  the 
bill  leaves  untouched  the  Federal  Gov¬ 
ernment’s  information  activities  for  such 
purposes  as  economic  regulations.  This 
definition  was  also  included  to  exempt 
from  the  coverage  of  the  bill  intelligence 
files  and  data  banks  devoted  solely  to 
foreign  nationals  or  maintained  by  the 
State  Department,  the  Central  Intelli¬ 
gence  Agency  and  other  agencies  for  the 
purpose  of  dealing  with  nonresident 
aliens  and  people  in  other  countries.” 
(Senate  Report  93-1183,  p.  79). 

The  language  cited  above  suggests  that 
a  distinction  can  be  made  between  in¬ 
dividuals  acting  in  a  personal  capacity 
and  individuals  acting  in  an  entrepre¬ 
neurial  capacity  (e.g.,  as  sole  proprie¬ 
tors)  and  that  this  definition  (and, 
therefore,  the  Act)  was  Intended  to  em¬ 
brace  only  the  former.  This  distinction 
is,  of  course  crucial  to  the  application 
of  the  Act  since  the  Act,  for  the  most 
part,  addresses  “records”  which  are 
defined  as  “*  *  •  information  about 
individuals”  (subsection  (a)  (4) ) .  Agen¬ 
cies  should  examine  the  content  of 
the  records  in  question  to  determine 
whether  the  information  being  main¬ 
tained  is,  in  fact,  personal  in  nature.  A 
secondary  criterion  in  deciding  whether 
the  subject  of  an  agency  file  is,  for  pur¬ 
poses  of  the  Act,  an  individual,  is  the 
manner  in  which  the  Information  is 
used;  l.e.,  is  the  subject  dealt  with  in  a 
personal  or  entrepreneurial  role. 

Files  relating  solely  to  nonresident 
aliens  are  not  covered  by  any  portion  of 
the  Act.  Where  a  system  of  records  covers 
both  citizens  and  nonresident  aliens,  only 
that  portion  which  relates  to  citizens  or 


resident  aliens  is  subject  to  the’ Act  but 
agencies  are  encouraged  to  treat  such 
systems  as  if  they  were,  in  their  entirety, 
subject  to  the  Act. 

The  Act  and  the  legislative  history  are 
silent  as  to  whether  a  decedent  may  be 
considered  to  be  an  individual  and 
whether  anyone  may  authorize  the  rights 
of  the  decedent  to  records  pertaining  to 
him  maintained  by  Federal  agencies,  ft 
would  appear  that  the  thrust  of  the  Act 
was  to  provide  certain  statutory  rights  to 
living  as  opposed  to  deceased  individuals. 
But  for  the  provision  enabling  parents  to 
act  on  behalf  of  minors  and  guardians  to 
act  on  behalf  of  those  deemed  to  be  in¬ 
competent,  the  rights  of  an  individual 
provided  by  the  Privacy  Act  could  not 
have  been  utilized  in  their  behalf  by 
those  interested.  The  failure  of  the  Pri¬ 
vacy  Act  to  so  provide  for  decedents  and 
the  overall  thrust  of  the  Act — that  indi¬ 
viduals  be  given  the  opportunity  to  judge 
for  themselves  how,  and  the  extent  to 
which,  certain  information  about  them 
maintained  by  Federal  agencies  is  used, 
and  the  implicit  personal  judgement  in¬ 
volved  in  this  thrust — indicates  that  the 
Act  did  not  contemplate,  permitting  rel¬ 
atives  and  other  interested  parties  to  ex¬ 
ercise  rights  granted  by  the  Privacy  Act 
to  individuals  after  the  demise  of  those 
individuals.  These  same  records,  however, 
may  pertain  as  well  to  those  living  per¬ 
sons  who  might  otherwise  seek  to  exer¬ 
cise  the  decedent’s  right  with  regard  to 
that  information  and  thereby  be  covered 
by  the  Privacy  Act.  Furthermore,  access 
to  a  decedent’s  records  may  be  had  in 
various  judicial  forums  as  a  part  of,  or 
ancillary  to,  other  proceedings. 

Maintain.  Subsection  (a)  (3)  “The 
term  ‘maintain’  includes  maintain,  col¬ 
lect,  use,  or  disseminate;” 

The  term  “maintain”  is  used  in  two 
ways  in  the  Privacy  Act. 

First,  it  is  used  to  connote  the  various 
record  keeping  functions  to  which  the 
requirements  of  the  Act  apply;  Le.,  main¬ 
taining,  collecting,  using,  or  disseminat¬ 
ing.  Thus,  wherever  the  word  “maintain” 
appears  with,  reference  to  a  record,  one 
should  understand  it  to  mean  collect, 
use,  or  disseminate  or  any  combination 
of  any  of  these  record-keeping  functions. 

Second,  it  is  used  to  connote  control 
over  and  hence  responsibility  and  ac¬ 
countability  for  systems  of  records.  This 
is  extremely  important  given  the  civil 
and  criminal  sanctions  in  subsections 
(g)  and  (i)  for  failure  to  comply  with 
certain  provisions.  The  applicability  of 
certain  provisions,  including  the  exemp¬ 
tions  in  subsections  (j)  and  (k),  can  be 
determined  by  an  agency’s  ability  to 
demonstrate  that  it  has  effective  control 
over  a  system  of  records.  See,  for  exam¬ 
ple,  subsections  (b)(1),  (d),  (e)(1),  (e) 
(9),  (g),  and  (i)  wherein  the  term 
“maintain”  clearly  means  having  effec¬ 
tive  control  over  a  system  of  records.  To 
have  effective  control  of  a  system  of  rec¬ 
ords  does  not  necessarily  mean  to  have 
physical  control  of  the  system.  When 
records  are  disclosed  to  Agency  B  from  a 
system  of  records  maintained  by  Agency 
A,  they  are  then  considered  to  be  main¬ 
tained  by  Agency  B  (as  well  as  Agency 
A)  and  are  subject  to  all  of  the  provi¬ 


sions  of  the  Act  in  the  same  manner  as 
though  Agency  B  had  originally  compiled 
them.  If  one  agency  turns  over  a  record 
from  its  system  of  records  to  a  second 
agency  and  that  record  is  placed  in  a 
separate  system  of  records  maintained 
by  the  second  agency,  then  the  record 
becomes  part  of  the  system  of  records 
maintained  by  the  second  agency  and 
all  of  the  published  material  as  to  the 
second  agency’s  system  of  records  would 
apply  to  the  record  moved  into  its  sys¬ 
tem. 

The  requirements  of  subsection  (m) 
must  also  be  carefully  considered  in  de¬ 
termining  which  systems  are  to  be  con¬ 
sidered  as  “maintained,”  i.e.,  controlled 
by  an  agency  within  the  terms  of  the 
Act.  Subsection  (m)  stipulates  that  sys¬ 
tems  of  records  operated  under  con¬ 
tract  or,  in  some  instances,  State  or  lo¬ 
cal  governments  operating  under  Fed¬ 
eral  mandates  “by  or  on  behalf  of  the 
agency  .  .  .  tQ  accomplish  an  agency 
function”  are  subject  to  the  provisions  of 
Section  3  of  the  Act.  The  intent  of  this 
provision  is  to  make  it  clear  that  the  sys¬ 
tems  “maintained”  by  an  agency  are  not 
limited  to  those  operated  by  agency  per¬ 
sonnel  on  agency  premises  but  include 
certain  systems  operated  pursuant  to  the 
terms  of  a  contract  to  which  the  agency 
is  a  party.  The  qualifying  phrase  “to  ac¬ 
complish  an  agency  function”  limits  the 
applicability  of  subsection  (m)  to  those 
systems  directly  related  to  the  perform¬ 
ance  of  Federal  agency  functions  by  ex¬ 
cluding  from  its  coverage  systems  which 
ate  financed,  in  whole  or  part,  with  Fed¬ 
eral  funds,  but  which  are  managed  by 
state  or  local  governments  for  the  bene¬ 
fit  of  State  or  local  governments. 

Record. — Subsection  (a)  (4)  “The  term 
‘record’  means  any  item,  collection  or 
grouping  of  Information  about  an  indi¬ 
vidual  that  is  maintained  by  an  agency, 
including,  but  not  limited  to,  his  educa¬ 
tion,  financial  transactions,  medical  his¬ 
tory,  and  criminal  or  employment  his¬ 
tory  and  that  contains  his  name,  or  the 
identifying  number,  symbol,  or  other 
identifying  particular  assigned  to  the 
individual,  such  as  a  finger  or  voice  print 
or  a  photograph;” 

The  term  “record”,  as  defined  for  pur¬ 
poses  of  the  Act,  means  a  tangible  or 
documentary  record  (as  opposed  to  a  rec¬ 
ord  contained  in  someone’s  memory)  and 
has  a  broader  meaning  than  the  term 
commonly  has  when  used  in  connection 
with  record-keeping  systems.  (It  may 
also  differ  from  the  usual  definition  of  a 
computer  record.)  An  understanding  of 
the  term  “record”,  as  it  is  used  in  the 
Act,  is  essential  in  interpreting  the 
meaning  of  many  of  the  Act’s  require¬ 
ments. 

A “record” 

Means  any  item  of  information  about 
an  individual  that  includes  an  individ¬ 
ual  identifier; 

Includes  any  grouping  of  such  items 
of  Information  (it  should  not  be  con¬ 
fused  with  the  use  of  the  term  record 
in  the  conventional  sense  or  as  used  in 
the  automatic  data  processing  (ADP) 
community) ; 

Does  not  distinguish  between  data  and 
information;  both  are  within  the  scope 
of  the  definition;  and 
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Includes  individual  identifiers  in  any 
form  including,  but  not  limited  to,  finger 
prints,  voice  prints  and  photographs. 

The  phrase  “identifying  particular” 
suggests  any  element  of  data  (name, 
number)  or  other  descriptor  (finger 
print,  voice  print,  photographs)  which 
can  be  used  to  identify  an  individual. 
Identifying  particulars  are  not  always 
unique  (i.e.,  many  individuals  share  the 
same  name)  byt  when  they  are  not 
unique  (e.g.,  name)  they  are  individually 
assigned — as  distinguished  from  generic 
characteristics. 

The  term  “record”  was  defined  “to 
assure  the  intent  that  a  record  can  in¬ 
clude  as  little  as  one  descriptive  item 
about  an  individual.”  (.Congressional 
Record,  p.  S21818,  December  17,  1974 
and  p.  H12246,  December  18,  1974) .  This 
definition  “includes  the  record  of  present 
registration,  or  membership  in  an  orga¬ 
nization  or  activity,  or  admission  to  an 
Institution.”  (Senate  Report  93-1183,  p. 
79).  (While  this  language  was  written 
with  reference  to  the  definition  of  the 
term  “personel  information”  in  the 
Senate  bill,  it  would  appear  to  be  equally 
applicable  to  the  term  “record”  as  used 
in  the  Act.) 

A  record,  by  this  definition,  can  be 
part  of  another  record.  Therefore  pro¬ 
hibitions  on  the  disclosure  of  a  record, 
for  example,  apply  not  only  to  the  entire 
record  in  the  conventional  sense  (such 
as  a  record  in  a  computer  system) ,  but 
also  to  any  item  or  grouping  of  items 
from  a  record  provided  that  such  group¬ 
ing  includes  an  individual  identifier. 

System  of  Records.  Subsection  (a)  (5) 
“The  term  ‘system  of  records’  means  a 
group  of  any  records  under  the  control 
of  any  agency  from  which  information 
Is  retrieved  by  the  name  of  the  individual 
or  by  some  identifying  number,  symbol, 
or  other  identifying  particular  assigned 
to  the  individual ;  ” 

The  definition  of  “system  of  records” 
limits  the  applicability  of  some  of  the 
provisions  of  the  Act  to  “records”  which 
are  maintained  by  an  agency,  retrieved 
by  individual  identifier  (i.e.,  there  is  an 
Indexing  or  retrievel  capability  using 
identifying  particulars,  as  discussed 
above,  built  into  the  system),  and  the 
agency  does,  in  fact,  retrieve  records 
about  individuals  by  reference  to  some 
personal  identifier. 

A  system  of  records  for  purposes  of 
the  Act  must  meet  all  of  the  following 
three  criteria: 

It  must  consist  of  records.  See  discus¬ 
sions  of  “record”  (a)  (4) ,  above. 

It  must  be  "under  the  control  of”  an 
agency. 

It  must  consist  of  records  retrieved  by 
reference  to  an  individual  name  or  some 
other  personal  identifier. 

The  phrase  “•  •  •  under  the  control 
of  any  agency  *  •  •”  was  intended  to 
accomplish  two  separate  purposes:  (1) 
TO  determine  possession  and  establish 
accountability;  and  (2)  to  separate 
agency  records  from  records  which  are 
maintained  personally  by  employees  of 
an  agency  but  which  are  not  agency  rec¬ 
ords. 


As  previously  noted,  the  definition  of 
“maintain”  was  broadened  to  encompass 
all  systems  used  by  Federal  agencies.  The 
phrase  under  the  control  of  any 

agency  •  *  *  ”  in  the  definition  of  “sys¬ 
tem  of  records”  was  not  intended  to 
eliminate  from  the  coverage  of  the  Act 
any  of  those  systems  (which  would  large¬ 
ly  negate  the  definition  of  “maintain”), 
but  rather  was  intended  to  assign  respon¬ 
sibility  to  a  particular  agency  to  dis¬ 
charge  the  obligations  established  by  the 
Privacy  Act.  An  agency  is  responsible 
for  those  systems  which  are  “*  •  * 
under  the  control  of”  that  agency.  The 
concept  of  possession  implicit  in  this 
phrase  is  also  apparent  in  the  language 
which  begins  most  of  the  operative  sub¬ 
sections  of  the  Act.  For  example,  the 
concept  is  evident  although  tacit  in  sub¬ 
section  (b) ;  express  in  subsection  (c) 
“under  its  control  •••*“•••  that 
maintains  a  system  of  records  •  *  *” 
in  subsections  (d),  (e)  and  (f) ;  “agency 
records”  in  subsection  (i),  and  “•  *  * 
any  system  of  records  within  the 
agency”  in  subsection  (j)  and  (k). 

The  intent  was,  despite  the  different 
wording  for  each  subsection,  not  to  have 
each  of  the  subsections  apply  to  a  differ¬ 
ent  roster  of  systems  of  records,  but  to 
express,  in  terms  of  possession,  for  which 
systems  of  records  an  agency  was  re¬ 
sponsible. 

The  second  purpose  of  the  phrase  was 
to  distinguish  “agency  records”  from 
those  records  which,  although  in  the 
physical  possession  of  agency  employees 
and  used  by  them  in  performing  official 
functions,  were  not  considered  “agency 
records.”  Uncirculated  personal  notes, 
papers  and  records  which  are  retained 
or  discarded  at  the  author’s  discretion 
and  over  which  the  agency  exercises  no 
control  or  dominion  (e.g.,  personal  tele¬ 
phone  lists)  are  not  considered  to  be 
agency  records  within  the  meaning  of 
the  Privacy  Act.  This  distinction  is  em¬ 
bodied,  in  part,  in  the  phrase  “under  the 
control  of”  an  agency  as  well  as  in  the 
definition  of  “record”  (5  U.S.C.  552(a) 
(4)). 

An  agency  shall  not  classify  records, 
which  are  controlled  and  maintained  by 
it,  as  non-agency  records.  In  order  to 
avoid  publishing  notices  of  their  exist¬ 
ence,  prevent  access  by  the  individuals 
to  whom  they  pertain,  or  otherwise  evade 
the  requirements  of  the  act. 

The  “are  retrieved  by”  criterion  im¬ 
plies  that  the  grouping  of  records  under 
the  control  of  an  agency  is  accessed  by 
the  agency  by  use  of  a  personal  identi¬ 
fier;  not  merely  that  a  capability  or  po¬ 
tential  for  retrieval  exists.  For  example, 
an  agency  record-keeping  system  on 
firms  it  regulates  may  contain  “records” 
(i.e.,  personal  information)  about  officers 
of  the  firm  incident  to  evaluating  the 
firm’s  performance.  Even  though  these 
are  clearly  “records”  under  the  control 
of”  an  agency,  they  would  not  be  con¬ 
sidered  part  of  a  system  as  defined  by 
the  Act  unless  the  agency  accessed  them 
by  reference  to  a  personal  identifier 
(name,  etc.) .  That  is,  If  these  hypotheti¬ 
cal  “records”  are  never  retrieved  except 
by  reference  to  company  identifier  or 


some  other  nonpersonal  indexing  scheme 
(e.g.,  type  of  firm)  they  are  not  a  part  of 
a  system  of  records.  Agencies  will  neces¬ 
sarily  have  to  make  determinations  on  a 
system-by-system  basis. 

Considerable  latitude  is  left  to  the 
agency  in  defining  the  scope  or  grouping 
of  records  which  constitute  a  system. 
Conceivably  all  the  “records”  for  a  par¬ 
ticular  program  can  be  considered  a 
single  system  or  the  agency  may  con¬ 
sider  it  appropriate  to  segment  a  system 
by  function  or  geographic  unit  and  treat 
each  segment  as  a  “system”.  The  im¬ 
plications  of  these  decisions  and  some 
limitations  on  them  are  discussed  in 
connection  with  subsection  (e)  (4) ,  pub¬ 
lication  of  the  annual  notice.  Briefly,  the 
two  considerations  which  the  agency 
should  take  into  account  in  its  decisions 
are 

Its  ability  to  comply  with  the  require¬ 
ments  of  the  Act  and  facilitate  the  exer¬ 
cise  of  the  rights  of  individuals;  and 

The  cost  and  convenience  to  the 
agency,  but  only  to  the  extent  consistent 
with  the  first  consideration. 

Statistical  Record.  Subsection  (a)(6) 
“The  term  ‘statistical  record’  means  a 
record  in  a  system  of  records  maintained 
for  statistical  research  or  reporting  pur¬ 
poses  only  and  not  used  in  whole  or  in 
part  in  making  any  determination  about 
an  identifiable  individual,  except  as  pro¬ 
vided  by  section  8  of  title  13;” 

A  “statistical  record”,  for  purposes  of 
this  Act,  is  a  record  in  a  system  of -records 
that  is  not  used  by  anyone  in  making  any 
determination  about  an  individual.  This 
means  that,  for  a  record  to  qualify  as  a 
“statistical  record”,  it  must  be  held  in  a 
system  which  is  separated  from  systems 
(some  perhaps  containing  the  same  in¬ 
formation)  which  contain  records  that 
are  used  in  any  manner  in  making  de¬ 
cisions  about  the  rights,  benefits,  or  en¬ 
titlements  of  an  identifiable  individual. 
The  term  “identifiable  individual”  is 
used  to  distinguish  determinations  about 
specific  individuals  from  determinations 
about  aggregates  of  individuals  as,  for 
example,  census  data  are  used  to  appor¬ 
tion  funds  on  the  basis  of  population. 

By  this  definition,  it  appears  that  some 
so-called  “research  records”  which  are 
only  used  for  analytic  purposes  qualify 
as  “statistical  records”  under  the  Act  if 
they  are  not  used  in  making  determina¬ 
tions.  A  “determination”  is  defined  as 
“any  decision  affecting  the  individual 
which  is  in  whole  or  in  part  based  on  in¬ 
formation  contained  in  the  record  and 
which  is  made  by  any  person  or  any 
agency.”  (House  Report  93-1416,  p.  15.) 

Most  of  the  records  of  the  Bureau  of 
the  Census  are  considered  to  be  “statisti¬ 
cal  records”  even  though,  pursuant  to 
section  8  of  title  13,  United  States  Code, 
the  Census  Bureau  is  authorized  to  “fur¬ 
nish  transcripts  of  census  records  for 
genealogical  and  other  proper  purposes 
and  to  make  special  statistical  surveys 
from  census  data  for  a  fee  upon  request.” 
(House  report  93-1416,  p.  12) 

In  applying  this  definition,  it  might 
be  helpful  to  distinguish  three  types  of 
collections  or  groupings  of  information 
about  individuals:  (1)  Statistical  cotn- 
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pilations  which,  because  they  cannot  be 
identified  with  individuals,  are  not  sub¬ 
ject  to  the  Act  at  all;  (2)  “records" 
maintained  solely  for  the  purpose  of 
compiling  statistics — which  are  the  types 
of  records  covered  by  (a)  (6) ;  and  (3) 
“records”  on  individuals  which  are  used 
both  to  compile  statistics  and  also  for 
other  purposes,  e.g.  a  criminal  history 
record  used  both  to  compile  individual 
statistics  and  to  assist  a  judge  in  making 
a  sentencing  decision  about  the  indi¬ 
vidual  to  whom  the  record  pertains, 
which  is  not  a  “statistical  record." 

The  term  “statistical  record”  is  used 
in  subsection  (k)  (4) ,  specific  exemp¬ 
tions. 

Routine  use.  Subsection  fa)  (7)  “The 
term  ‘routine  use’  means,  with  respect  to 
the  disclosure  of  a  record,  the  use  of  such 
record  for  a  purpose  which  is  compatible 
with  the  purpose  for  which  it  was  col¬ 
lected.” 

One  of  the  primary  objectives  of  the 
Act  is  to  restrict  the  use  of  information 
to  the  purposes  for  which  it  was  col¬ 
lected.  The  term  “routine  use”  was  intro¬ 
duced  to  recognize  the  practical  limita¬ 
tions  of  restricting  use  of  information  to 
explicit  and  expressed  purposes  for  which 
it  was  collected.  It  recognizes  that  there 
are  corollary  purposes  “compatible  with 
the  purpose  for  which  [the  information] 
was  collected"  that  are  appropriate  and 
necessary  for  the  efficient  conduct  of 
government  and  in  the  best  interest  of 
both  the  individual  and  the  public.  Rou¬ 
tine  uses  include  “transfer  of  informa¬ 
tion  to  the  Treasury  Department  to  com¬ 
plete  payroll  checks,  the  receipt  of  infor¬ 
mation  by  the  Social  Security  Adminis¬ 
tration  to  complete  quarterly  posting  of 
accounts,  or  other  such  housekeeping 
measures  and  necessarily  frequent  inter¬ 
agency  or  intra-agency  transfers  of  in¬ 
formation."  (Congressional  Record  p. 
S21816,  December  17,  1974  and  p. 
H12244,  December  18,  1974) 

Additional  guidance  on  the  conceptual 
basis  for  “routine  uses”  is  found  in  the 
statement  of  Congressman  Moorhead  on 
the  House  floor: 

It  would  be  an  Impossible  legislative  task 
to  attempt  to  set  forth  all  of  the  appropriate 
uses  of  Federal  records  about  an  identifiable 
individual.  It  is  not  the  purpose  of  the  bill 
to  restrict  such  ordinary  uses  of  the  infor¬ 
mation.  Rather  than  attempting  to  specify 
each  proper  use  of  such  records,  the  bill 
gives  each  Federal  agency  the  authority  to 
set  forth  the  “routine”  purposes  for  which 
the  records  are  to  be  used  under  the  guid¬ 
ance  contained  in  the  committee’s  report. 

In  this  sense  “routine  use”  does  not  en¬ 
compass  merely  the  common  and  ordinary 
uses  to  which  records  are  put,  but  also  in¬ 
cludes  all  of  the  proper  and  necessary  uses 
even  if  any  such  use  occurs  infrequently. 
For  example,  individual  income  tax  return 
records  are  routinely  used  for  auditing  the 
determination  of  the  amount  of  tax  due  and 
for  assistance  in  collection  of  such  tax  by 
civil  proceedings.  They  are  less  often  used, 
however,  for  referral  to  the  Justice  Depart¬ 
ment  for  possible  criminal  prosecution  In 
the  event  of  possible  fraud  or  tax  evasion, 
though  no  one  would  argue  that  such  referral 
is  Improper;  thus  the  “routine"  use  of  such 
records  and  subsection  (b)  (8)  might  be  ap¬ 
propriately  construed  to  permit  the  Internal 
Revenue  Service  to  list  In  its  regulations 
such  a  referral  as  a  “routine  use.” 


Again,  if  a  Federal  agency  such  as  the 
Housing  and  Urban  Development  Depart¬ 
ment  or  the  mall  Business  Administration 
were  to  discover  a  possible  fraudulent 
scheme  in  one  of  its  programs  it  could  “rou¬ 
tinely”,  as  it  does  today,  refer  the  relevant 
ment  or  the  Small  Business  Administration 
investigatory  arm,  the  FBI. 

Mr.  Chairman,  the  bill  obviously  is  not 
intended  to  prohibit  such  necessary  ex¬ 
changes  of  information,  providing  its  rule- 
making  procedures  are  followed.  It  is 
intended  to  prohibit  gratuitous,  ad  hoc,  dis¬ 
seminations  for  private  or  otherwise  irregu¬ 
lar  purposes.  To  this  end  it  would  be  suffi¬ 
cient  if  an  agency  publishes  as  a  “routine 
use”  of  its  information  gathered  in  any  pro¬ 
gram  that  an  apparent  violation  of  the  law 
will  be  referred  to  the  appropriate  law  en¬ 
forcement  authorities  for  investigation  and 
possible  criminal  prosecution,  civil  court  ac¬ 
tion,  or  regulatory  order.  ( Congressional  Rec¬ 
ord,  November  21,  1974,  p.H10962) 

In  discussing  the  final  language  of  the 
Act,  Senator  Ervin  and  Congressman 
Moorhead,  In  similar  statements  said 
that  “ftlhe  compromise  definition  should 
serve  as  a  caution  to  agencies  to  think 
out  in  advance  what  uses  it  will  make  of 
information.  This  Act  is  not  intended  to 
Impose  undue  burdens  on  the  transfer  of 
information  to  the  Treasury  Department 
to  complete  payroll  checks,  the  receipt 
of  information  by  the  Social  Security  Ad¬ 
ministration  to  complete  quarterly  post¬ 
ing  of  accounts,  or  other  such  housekeep¬ 
ing  measures  and  necessarily  frequent  in¬ 
teragency  or  intra-agency  transfers  of 
information.  It  is,  however,  intended  to 
discourage  the  unnecessary  exchange  of 
information  to  other  persons  or  to  agen¬ 
cies  who  may  not  be  as  sensitive  to  the 
collecting  agency’s  reasons  for  using  and 
interpreting  the  material.”  (.Congression¬ 
al  Record,  December  17,  1974,  p.  S21816 
and  December  18,  1974,  p.  H12244).  This 
implies,  at  least,  that  a  “routine  use" 
must  be  not  only  compatible  with,  but 
related  to,  the  purpose  for  which  the  rec¬ 
ord  Is  maintained;  e.g.,  development  of 
a  sampling  frame  for  an  evaluation  study 
or  other  statistical  purposes. 

There  are  certain  “routine  uses”  which 
are  applicable  to  a  substantial  number 
of  systems  of  records  but  which  are  only 
permissible  if  properly  established  by 
each  agency: 

Disclosures  to  a  law  enforcement 
agency  when  criminal  misconduct  is  sus¬ 
pected  in  connection  with  the  adminis¬ 
tration  of  a  program;  e.g.,  apparently 
falsified  statements  on  a  grant  applica¬ 
tion  or  suspected  fraud  on  a  contract. 

Disclosures  to  an  investigative  agency 
in  the  process  of  requesting  that  a  back¬ 
ground  or  suitability  investigation  be 
conducted  on  individuals  being  cleared 
for  access  to  classified  information,  em¬ 
ployment  on  contracts,  or  appointment 
to  a  position  within  the  agency. 

The  Act  further  limits  the  extent  to 
which  disclosures  can  be  made  as  “rou¬ 
tine  uses”  by  requiring  an  agency  to  es¬ 
tablish  the  “routine  uses"  of  information 
in  each  system  of  records  which  it  main¬ 
tains  by  publishing  a  declaration  of  in¬ 
tent  in  the  Federal  Register,  thereby 
permitting  public  review  and  comment 
(subsection  (e)(ll)). 


Subsection  (b)  Conditions  of 
Disclosure 

*  Subsection  (b)  “No  agency  shall  dis¬ 
close  any  record  which  is  contained  in 
a  system  of  records  by  any  means  of 
communication  to  any  person,  or  to 
another  agency,  except  pursuant  to  a 
written  request  by,  or  with  the  prior 
written  consent  of,  the  individual  to 
whom  the  record  pertains,  unless  dis¬ 
closure  of  the  record  would  be — ” 

This  subsection  provides  that  an 
agency  may  not  disclose  any  record  con¬ 
tained  in  system  of  records,  as  defined 
in  subsection  (a)  (5)  above,  to  any  per¬ 
son  or  to  any  other  agency  unless  the 
agency  which  maintains  the  record  is 
requested  to  do  so  by  the  individual  to 
whom  the  record  pertains  or  the  agency 
has  obtained  the  written  consent  of  the 
individual  or  the  disclosure  would  fall 
within  one  or  more  of  the  categories 
enumerated  in  subsections  (b)(1) 
through  (11) ,  below.  The  phrase  “by  any 
means  of  communication”  means  any 
type  of  disclosure  (e.g.,  oral  disclosure, 
written  disclosure,  electronic  or  mechan¬ 
ical  transfers  between  computers  of  the 
contents  of  a  record) . 

Disclosure,  however,  is  permissive  not 
mandatory.  An  agency  is  authorized  to 
disclosure  a  record  for  any  purpose 
enumerated  below  when  it  deems  that 
disclosure  to  be  appropriate  and  con¬ 
sistent  with  the  letter  and  intent  of  the 
Act  and  these  guidelines. 

Nothing  in  the  privacy  act  should  be 
Interpreted  to  authorize  or  compel  dis¬ 
closures  of  records,  not  otherwise  per¬ 
mitted  or  required,  to  anyone  other  than 
the  individual  to  whom  a  record  pertains 
pursuant  to  a  request  by  the  individual 
for  access  to  it. 

Agencies  shall  not  automatically  dis¬ 
close  a  record  to  someone  other  than  the 
individual  to  whom  it  pertains  simply  be¬ 
cause  such  a  disclosure  is  permitted  by 
this  subsection.  Agencies  shall  continue 
to  abide  by  other  constraints  on  their 
authority  to  disclose  information  to  a 
third  party  including,  where  appropriate, 
the  likely  effect  upon  the  individual  of 
making  that  disclosure.  Except  as  pre¬ 
scribed  in  subsection  (d)(1),  (individual 
access  to  records)  this  Act  does  not  re¬ 
quire  disclosure  of  a  record  to  anyone 
other  than  the  individual  to  whom  the 
record  pertains. 

A  disclosure  may  be  either  the  transfer 
of  a  record  or  the  granting  of  access  to 
a  record. 

The  fact  that  an  individual  is  in¬ 
formed  of  the  purposes  for  which  infor¬ 
mation  will  be  used  when  Information  is 
collected  pursuant  to  subsection  (e)(3> 
does  not  constitute  consent. 

There  are  two  instances  in  which  con¬ 
sent  to  disclose  a  record  might  be  ac¬ 
tively  sought  by  an  agency  (i.e.,  with¬ 
out  waiting  for  the  individual  to  request 
that  a  disclosure  be  made) . 

Disclosure  would  properly  be  a  “rou¬ 
tine  use”  (b)(3))  but  disclosure  is  pro¬ 
posed  to  be  made  before  the  30  day 
notice  period;  e.g.,  the  agency  is  devel¬ 
oping  a  sampling  frame  for  an  evaluation 
study  or  a  statistical  program  directly 
related  to  the  purpose  for  which  the 
record  was  established. 
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Disclosure  is  unrelated  to  the  purpose 
for  which  the  record  is  maintained  but 
the  individual  may  wish -to  elect  to  have 
his  or  her  record  disclosed;  e.g.,  to  have 
information  on  a  Federal  employment 
application  referred  to  State  agencies  or 
to  permit  information  on  such  an  appli¬ 
cation  to  be  checked  against  other  Fed¬ 
eral  agency’s  records. 

In  either  case,  however,  care  must  be 
exercised  to  assure  that  the  language  of 
the  request  is  not  coercive  and  that  any 
consequences  of  refusing  to  consent  are 
made  clear.  It  is  particularly  important 
that  the  impression  not  be  created  that 
consent  to  disclose  is  a  prerequisite  to 
obtaining  a  benefit  when  it  is  not. 

The  consent  provision  of  this  subsec¬ 
tion  was  not  intended  to  permit  a  blanket 
or  open-ended  consent  clause;  i.e.,  one 
which  would  permit  the  agency  to  dis¬ 
close  a  record  without  limit.  At  a  mini¬ 
mum,  the  consent  clause  should  state  the 
general  purposes  for,  or  types  of  recip¬ 
ients,  to  which  disclosure  may  be  made. 

A  record  in  a  system  of  records  may  be 
disclosed  without  either  a  request  from 
or  the  written  consent  of  the  individual 
to  whom  the  record  pertains  only  if  dis¬ 
closure  is  authorized  below. 

Disclosure  voithin  the  Agency.  Subsec¬ 
tion  (b)(1)  "To  those  officers  and  em¬ 
ployees  of  the  agency  which  maintains 
the  record  who  have  a  need  for  the  rec¬ 
ord  in  the  performance  of  their  duties;” 

This  provision  is  based  on  a  “need  to 
know”  concept.  See  also  definition  of 
“agency,”  (a)(1).  It  is  recognized  that 
agency  personnel  require  access  to  rec¬ 
ords  to  discharge  their  duties.  In  discus¬ 
sing  the  conditions  of  disclosure  provi¬ 
sion  generally,  the  House  Committee 
said  that  “it  is  not  the  Committee’s  in¬ 
tent  to  impede  the  orderly  conduct  of 
government  or  delay  services  performed 
in  the  interests  of  the  individual.  Under 
the  conditional  disclosure  provisions  of 
the  bill,  ‘routine’  transfers  will  be  per¬ 
mitted  without  the  necessity  of  prfcr 
written  consent.  A  ‘non-routine’  transfer 
is  generally  one  in  which  the  personal 
information  on  an  individual  is  used  for 
a  purpose  other  than  originally  in¬ 
tended.”  (House  Report  93-1416,  p.  12). 

This  discussion  suggests  that  some 
constraints  on  the  transfer  of  records 
within  the  agency  were  intended  irre¬ 
spective  of  the  definition  of  agency.  Min¬ 
imally,  the  recipient  officer  or  employee 
must  have  an  official  “need  to  know.” 
The  language  would  also  seem  to  imply 
that  the  use  should  be  generally  related 
to  the  purpose  for  which  the  record  is 
maintained. 

Movement  of  records  between  person¬ 
nel  of  different  agencies  may  in  some  in¬ 
stances  be  viewed  as  intra-agency  dis¬ 
closures  if  that  movement  is  in  connec¬ 
tion  with  an  inter-agency  support  agree¬ 
ment.  For  example,  the  payroll  records 
compiled  by  Agency  A  to  support  Agency 
B  in  a  cross-service  arrangement  are, 
arguably,  being  maintained  by  Agency  A 
as  if  it  were  an  employee  of  Agency  B. 
While  such  transfers  would  meet  the 
.criteria  both  for  intra-agency  disclosure 
and  “routine  use,”  they  should  be  treated 
as  intra-agency  disclosures  for  purposes 
of  the  accounting  requirements  (e)(1). 

FEDERAL 


In  this  case,  however.  Agency  B  would 
remain  responsible  and  liable  for  the 
maintenance  of  such  records  in  con¬ 
formance  with  the  Act. 

It  should  be  noted  that  the  conditions 
of  disclosure  language  makes  no  specific 
provision  for  disclosures  expressly  re¬ 
quired  by  law  other  than  5  U.S.C.  552. 
Such  disclosures,  which  are  in  effect  con- 
gressionally-mandated  “routine  uses,” 
should  still  be  established  as  “routine 
uses”  pursuant  to  subsections  (e)  (11) 
and  (e)(4)(D).  This  is  not  to  suggest 
that  a  “routine  use”  must  be  specifically 
prescribed  in  law. 

Disclosure  to  the  Public.  Subsection  • 
(b)  (2)  “Required  under  section  552  of 
this  title;”  Subsection  (b)  (2)  is  intended 
“to  preserve  the  status  quo  as  interpreted 
by  the  courts  regarding  the  disclosure  of 
personal  information”  to  the  puhlic  un¬ 
der  the  Freedom  of  Information  Act 
( Congressional  Record  p.  S21817,  Decem¬ 
ber  17,  1974  and  p.  H12244,  December  18, 
1974) .  It  absolves  the  agency  of  any  ob¬ 
ligation  to  obtain  the  consent  of  an  in¬ 
dividual  before  disclosing  a  record  about 
him  or  her  to  a  member  of  the  public  to 
whom  the  agency  is  required  to  disclose 
such  information  under  the  Freedom  of 
Information  Act  and  permits  an  agency 
to  withhold  a  record  about  an  individual 
from  a  member  of  the  public  only  to  the 
extent  that  it  is  permitted  to  do  so  under 
closed  (i.e.,  they  are  permitted  to  be 
552(b)).  Given  the  use  of  the  term  “re¬ 
quired”,  agencies  may  not  voluntarily 
make  public  any  record  which  they  are 
not  required  to  release  (i.e.,  those  that 
they  are  permitted  to  withhold)  without 
the  consent  of  the  individual  unless  that 
disclosure  is  permitted  under  one  of  the 
other  portions  of  this  subsection. 

Records  which  have  traditionally  been 
considered  to  be  in  the  public  domain 
and  are  required  to  be  disclosed  to  the 
public,  such  as  many  of  the  final  orders 
and  opinions  of  quasi-judicial  agencies, 
press  releases,  etc.  may  be  released  under 
this  provision  without  waiting  for  a  spe¬ 
cific  Freedom  of  Information  Act  request. 
For  example,  opinions  of  quasi-judicial 
agencies  may  be  sent  to  counsel  for  the 
parties  and  to  legal  reporting  services, 
and  press  releases  may  be  issued  by 
agencies  dealing  with  public  record  mat¬ 
ters  such  as  suits  commenced  or  agency 
proceedings  initiated.  Records  which  the 
agency  would  elect  to  disclose  to  the  pub¬ 
lic  but  which  are  not  required  to  be  dis¬ 
closed  (i.e.,  they  are  permitted  to  be 
withheld  under  the  FOIA)  may  only  be 
released  to  the  public  under  the  “routine 
use”  provision  (subsection  (b)  (3) ) .  Note, 
however,  that  an  agency  may  not  rely  on 
any  provision  of  the  Freedom  of  Infor¬ 
mation  Act  as  a  basis  for  refusing  access 
to  a  record  to  the  individual  to  whom  it 
pertains,  unless  such  refusal  of  access 
is  authorized  by  an  exemption  within  the 
Privacy  Act.  See  subsections  (d)  (1)  and 
(g)  below. 

Disclosure  for  a  “Routine  Use’’.  Sub¬ 
section  (b)  (3)  “For  a  routine  use  as  de¬ 
fined  in  subsection  (a)  (7)  of  this  section 
and  described  under  subsection  (e)  (4) 
(D)  of  this  section;” 

Records  may  be  disclosed  without  the 
prior  consent  of  the  individual  for  a 
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“routine  use”,  as  defined  above,  if  that 
“routine  use”  has  been  established  and 
described  in  the  public  notice  about  the 
system  published  pursuant  to  subsections 
(e)  (4)  (D) ,  and  (e)  (11)  below. 

Disclosure  to  the  Bureau  of  the  Census. 
Subsection  (b)  (4)  “To  the  Bureau  of  the 
Census  for  purposes  of  planning  or  carry¬ 
ing  out  a  census  or  survey  or  related  ac¬ 
tivity  pursuant  to  the  provisions  of  title 
13;” 

Agencies  may  disclose  records  to  the 
Census  Bureau  in  individually  identifi¬ 
able  form  for  use  by  the  Census  Bureau 
pursuant  to  the  provisions  of  Title  13. 
(Title  13  not  only  limits  the  uses  which 
may  be  made  of  these  records  but  also 
makes  them  immune  from  compulsory 
disclosure) . 

Disclosure  for  Statistical  Research  and 
Reporting.  Subsection  (b)(5)  “To  a 
recipient  who  has  provided  the  agency 
with  advance  adequate  written  assurance 
that  the  record  will  be  used  solely  as  a 
statistical  research  or  reporting  record, 
and  the  record  is  to  be  transferred  in  a 
form  that  is  not  individually  identifi¬ 
able;” 

Agencies  may  disclose  records  for  sta¬ 
tistical  purposes  under  limited  condi¬ 
tions.  The  use  of  the  phrase  “in  a  form 
that  is  not  individually  identifiable” 
means  not  only  that  the  information 
disclosed  or  transferred  must  be 
stripped  of  individual  identifiers  but 
also  that  the  identity  of  the  individual 
can  not  reasonably  be  deduced  by  any¬ 
one  from  tabulations  or  other  presen¬ 
tations  of  the  information  (i.e.,  the 
identity  of  the  individual  can  not  be  de¬ 
termined  or  deduced  by  combining  vari¬ 
ous  statistical  records  or  by  reference  to 
public  records  or  other  available  sources 
of  information.)  See  also  the  discussion 
of  “statistical  record”  ((a)  (6)),  above. 

Records,  whether  or  not  statistical 
records  as  defined  in  (a)  (6),  above,  may 
be  disclosed  for  statistical  research  or 
reporting  purposes  only  after  the  agency 
which  maintains  the  record  has  received 
and  evaluated  a  written  statement 
which : 

States  the  purpose  for  requesting  the 
records;  and 

Certifies  that  they  will  only  be  used  as 
statistical  records. 

Such  written  statements  will  be  made 
part  of  the  agency’s  accounting  of  dis¬ 
closures  under  subsection  (c)(14. 

Fundamentally,  agencies  disclosing 
records  under  this  provision  are  re¬ 
quired  to  assure  that  information  dis¬ 
closed  for  use  as  a  statistical  research  or 
reporting  record  cannot  reasonably  be 
used  in  any  way  to  make  determinations 
about  individuals.  One  may  infer  from 
the  legislative  history  and  other  portions 
of  the  Act  that  an  objective  of  this  pro¬ 
vision  is  to  reduce  the  possibility  of 
matching  and  analysis  of  statistical  rec¬ 
ords  with  other  records  to  reconstruct 
individually  identifiable  records.  An  ac¬ 
counting  of  disclosures  is  not  required 
when  agencies  publish  aggregate  data  so 
long  as  no  individual  member  of  the 
population  covered  can  be  identified: 
for  example,  statistics  on  employee  turn  ¬ 
over  rates,  sick  leave  usage  rates. 
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Viewed  from  the  perspective  of  the 
recipient  agencies,  material  thus  trans¬ 
ferred  would  not  constitute  records  for 
its  purposes. 

Disclosure  to  the  National  Archives. 
Subsection  (b)  (6)  “To  the  National  Ar¬ 
chives  of  the  United  States  as  a  record 
which  has  sufficient  historical  or  other 
value  to  warrant  its  continued  preserva¬ 
tion  by  the  United  States  Government,  or 
for  evaluation  by  the  Administrator  of 
General  Services  or  his  designee  to  de¬ 
termine  whether  the  record  has  such 
value.” 

Agencies  may  disclose  records  to  the 
National  Archives  of  the  United  States 
pursuant  to  Section  2103  of  Title  44  of 
the  United  States  Code  which  provides 
for  the  preservation  of  records'  “of  his¬ 
torical  or  other  value”.  This  subsection 
((b)  (6))  allows  not  only  the  transfer  of 
records  for  preservation  but  also  the  dis¬ 
closure  of  records  to  the  Archivist  to 
permit  a  determination  as  to  whether 
preservation  under  Title  44  is  warranted. 
See  subsections  (1 )  (2)  and  (1)  (3)  for  a 
discussion  of  constraints  on  the  main¬ 
tenance  of  records  by  the  Archives. 

Records  which  are  transferred  to  Fed¬ 
eral  Records  Centers  for  safekeeping  or 
storage  do  not  fall  within  this  category. 
Such  transfers  are  not  considered  to  be 
disclosures  within  the  terms  of  this  Act 
since  the  records  remain  under  the  con¬ 
trol  of  the  transferring  agency.  Federal 
Records  Center  personnel  are  acting  on 
behalf  of  the  agency  which  controls  the 
records.  See  subsection  (1)  (1),  below. 

Disclosure  .'or  Law  Enforcement  Pur¬ 
poses.  Subsection  (b)  (7)  “To  another 
agency  or  to  an  instrumentality  of  any 
governmental  jurisdiction  within  or  un¬ 
der  the  control  of  the  United  States  for  a 
civil  or  criminal  law  enforcement  activ¬ 
ity  If  the  activity  is  authorized  by  law, 
and  if  the  head  of  the  agency  or  instru¬ 
mentality  has  made  a  written  request  to 
the  agency  which  maintains  the  record 
specifying  the  particular  portion  desired 
and  the  law  enforcement  activity  for 
which  the  record  is  sought:" 

An  agency  may,  upon  receipt  of  a  writ¬ 
ten  request,  disclose  a  record  to  another 
agency  or  unit  of  State  or  local  govern¬ 
ment  for  a  civil  or  criminal  law  enforce¬ 
ment  activity.  The  request  must  specify 

The  law  enforcement  purpose  for 
which  the  record  is  requested;  and 

The  particular  record  requested. 

Blanket  requests  for  all  records  per¬ 
taining  to  an  individual  are  not  permit¬ 
ted.  Agencies  or  other  entities  seeking 
disclosure  may,  of  course,  seek  a  court 
order  as  a  basis  for  disclosure.  See  sub¬ 
section  (b) (11). 

A  record  may  also  be  disclosed  to  a  law 
enforcement  agency  at  the  Initiative  of 
the  agency  which  maintains  the  record 
when  a  violation  of  law  is  suspected; 
provided.  That  such  disclosure  has  been 
established  in  advance  as  a  "routine  use” 
and  that  misconduct  1s  related  to  the 
purposes  for  which  the  records  are  main¬ 
tained.  For  example,  certain  loan  or  em¬ 
ployment  application  information  may 
be  obtained  with  the  understanding  that 


individuals  who  knowingly  and  willfully 
provide  inaccurate  or  erroneous  informa¬ 
tion  will  be  subject  to  criminal  prosecu¬ 
tion.  This  usage  was  explicitly  addressed 
by  Congressman  Moorhead  in  explaining 
the  House  bill,  on  the  floor  of  the  House: 

It  should  be  noted  that  the  “routine  use” 
exception  Is  In  addition  to  the  exception 
provided  for  dissemination  for  law  enforce¬ 
ment  activity  under  subsection  (b)  (7)  of  the 
bill.  Thus  a  requested  record  may  be  dissem¬ 
inated  under  either  the  “routine  use”  excep¬ 
tion,  the  “law  enforcement”  exception,  or 
both  sections,  depending  on  the  circumstan¬ 
ces  of  the  case.  ( Congressional  Record  No¬ 
vember  21,  1974,  p.  H10962.) 

In  that  same  discussion,  additional 
guidance  was  provided  on  the  term  “head 
of  the  agency’’  as  that  term  is  used  in  this 
subsection  ((b)): 

The  words  “head  of  the  agency”  deserve 
elaboration.  The  committee  recognizes  that 
the  heads  of  Government  departments  can¬ 
not  be  expected  to  personally  request  each 
of  the  thousands  of  records  which  may  pro¬ 
perly  be  disseminated  under  this  subsection. 
If  that  were  required,  such  officials  could  not 
perform  their  other  duties,  and  In  many 
cases,  they  could  not  even  perform  record  re¬ 
questing  duties  alone.  Such  duties  may  be 
delegated,  like  other  duties,  to  other  officials, 
when  absolutely  necessary  but  never  below  a 
section  chief,  and  this  is  what  is  contem¬ 
plated  by  subsection  (b)(7).  The  Attorney 
General,  for  example,  will  have  the  power  to 
delegate  the  authority  to  request  the  thou¬ 
sands  of  records  which  may  be  required  for 
the  operation  of  the  Justice  Department  un¬ 
der  this  section. 

It  should  be  noted  that  this  usuage  is 
somewhat  at  variance  with  the  use  of  the 
term  “agency  head”  in  subsections  (j), 
and  (k),  rules  and  exemptions,  where 
delegations  to  this  extent  are  neither 
necessary  nor  appropriate. 

This  subsection  permits  disclosures  for 
law  enforcement  purposes  only  to  gov¬ 
ernmental  agencies  “within  or  under  the 
control  of  the  United  States.”  Dis¬ 
closures  to  to  foreign  (as  well  as  to  State 
and  local)  law  enforcement  agencies 
may,  when  appropriate,  be  established 
as  “routine  uses.” 

Records  in  law  enforcement  systems 
may  also  be  disclosed  for  law  enforce¬ 
ment  purposes  when  that  disclosure  has 
properly  been  established  as  a  “routine 
use”;  e.g.,  statutorily  authorized  re¬ 
sponses  to  properly  made  queries  to  the 
National  Driver  Register;  transfer  by  a 
law  enforcement  agency  of  protective 
intelligence  information  to  the  Secret 
Service. 

Disclosure  under  Emergency  Circum¬ 
stances.  Subsection  (b)  (8)  “To  a  person 
pursuant  to  a  showing  of  compelling  cir¬ 
cumstances  affecting  the  health  or  safety 
of  an  individual  if  upon  such  disclosure 
notification  is  transmitted  to  the  last 
known  address  of  such  individual;” 

Agencies  may  disclose  records  when, 
for  example,  the  time  required  to  obtain 
the  consent  of  the  individual  to  whom 
the  record  pertains  might  result  in  a  de¬ 
lay  which  could  impair  the  health  or 
saJfety  of  an  individual;  as  in  the  release 
of  medical  records  on  a  patient  under¬ 
going  emergency  treatment.  The  individ¬ 
ual  pertaining  to  whom  records  are 


disclosed  need  not  necessarily  be  the  in¬ 
dividual  whose  health  or  safety  is  at 
peril;  e.g.,  release  of  dental  records  on 
several  individuals  in  order  to  identify 
an  individual  who  was  injured  in  an 
accident. 

Disclosure  to  the  Congress.  Subsection 
(b)  (9)  “To  either  House  of  Congress,  or, 
to  the  extent  of  matter  within  its  juris¬ 
diction,  any  committee  or  subcommittee 
thereof,  any  joint  committee  of  Congress 
or  subcommittee  of  any  such  joint 
committee;” 

This  language  does  not  authorize  the 
disclosure  of  a  record  to  members  of 
Congress  acting  in  their  individual  ca¬ 
pacities  without  the  consent  of  the  in¬ 
dividual. 

Disclosure  to  the  General  Accounting 
Office.  Subsection  (b)(10)  “To  the 
Comptroller  General,  or  any  of  his  au¬ 
thorized  representatives,  in  the  course  of 
the  performance  of  the  duties  of  the 
General  Accounting  Office;” 

Disclosure  Pursuant  to  Court  Arder. 
Subsection  (b)(ll)  “Pursuant  to  the 
order  of  a  court  of  competent  jurisdic¬ 
tion.” 

Subsection  (c)  Accounting  of  Certain 
Disclosures 

Subsection  (c)  “Each  agency,  with  re¬ 
spect  to  each  system  of  record  under 
its  control,  shall — ” 

When  Accounting  Is  Required.  Sub¬ 
section  (c)(1)  “Except  for  disclosures 
made  under  subsections  (b)(1)  or  (b) 
(2)  of  this  section,  keep  an  accurate 
accounting  of — 

“(A)  The  date,  nature,  and  purpose  of 
each  disclosure  of  a  record  to  any  person 
or  to  another  agency  made  under  sub¬ 
section  (b)  of  this  section;  and 

“(B)  The  name  and  address  of  the 
person  or  agency  to  whom  the  disclosure 
is  made;” 

An  accounting  is  required 

For  disclosures  outside  the  agency 
even  when  such  disclosure  is  at  the  re¬ 
quest  of  the  individual  with  the  written 
consent  or  at  the  request  of  the  indivi¬ 
dual; 

For  disclosures  for  routine  uses  (see 
(b) (3)) ; 

For  disclosures  to  the  Bureau  of  the 
Census  (see  (b)  (4) ) ; 

For  disclosures  to  a  person  or  another 
agency  for  statistical  research  or  report¬ 
ing  purposes  (see  (b)(5)); 

For  disclosures  to  the  Archives  (see 
(b)(6)); 

For  disclosures  for  a  law  enforcement 
activity  consistent  with  the  provisions 
of  subsection  (see  (b)  (7) ) ; 

For  disclosures  upon  a  showing  of 
“compelling  circumstances”  (see  (b) 
(8)); 

For  disclosures  to  the  Congress  or  the 
Comptroller  General  (see  (b)  (9)  and 
(10));  or 

For  disclosures  pursuant  to  a  court 
order  (see  (b) (ID). 

An  accounting  of  disclosures  is  not 
required 

For  disclosures  to  employees  of  the 
agency  maintaining  the  record  who  have 
a  need  to  have  access  in  the  performance 
of  their  official  duties  for  the  agency. 
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(Agencies  are  required  to  establish  safe¬ 
guards,  pursuant  to  subsection  (e)(10), 
to  assure  that  individuals  who  do  not 
have  a  “need  to  know”  will  not  have  ac¬ 
cess.)  (see  (b)(1));  or 

For  disclosures  to  members  of  the  pub¬ 
lic  which  would  be  required  under  the 
Freedom  of  Information  Act  (see 
(b) (2)). 

(Not*:  That  the  accounting  requirement 
is  not  one  from  which  an  energy  may 
seek  an  exemption  under  subsections  (J) 
and  (k).) 

“The  term  ‘accounting’  rather  than 
‘record,’  twas  used]  to  indicate  that  an 
agency  need  not  make  a  notation  on 
a  single  document  of  every  disclosure 
of  a  particular  record.  The  agency  may 
use  any  system  it  desires  for  keeping 
notations  of  disclosures,  provided  that 
it  can  construct  from  its  system  a  docu¬ 
ment  listing  of  all  disclosures.”  (House 
Report  93-1416,  p.  14).  For  example,  if 
a  list  of  names  and  other  pertinent  data 
necessary  to  issue  payroll  or  benefit 
checks  is  transferred  to  a  disbursing  of¬ 
fice  outside  the  agency,  the  agency  trans¬ 
ferring  the  record  need  not  maintain  a 
separate  record  of  such  transfer  in  each 
individual  record  provided  that  it  can 
construct  the  required  accounting  infor¬ 
mation  when  requested  by  the  individ¬ 
ual  (subsection  (c)(3))  or  when  neces¬ 
sary  to  inform  previous  recipients  of  any 
corrected  or  disputed  information  (sub¬ 
section  (c)(4)).  The  accounting  should 
also  provide  a  cross-reference  to  the 
basis  upon  which  the  release  was  made 
including  any  written  documentation  as 
is  required  in  the  case  of  the  release  of 
records  for  statistical  or  law  enforcement 
purposes. 

In  some  instances,  (e.g.,  investigation 
or  prosecution  of  suspected  criminal  ac¬ 
tivity)  a  disclosure  may  consist  of  a  con¬ 
tinuing  dialogue  between  two  agencies 
over  a  period  of  weeks  or  months.  In 
such  a  situation,  it  may  be  appropriate 
to  make  a  general  notation  that,  as  of 
a  specified  date,  such  contact  was  ini¬ 
tiated  and  will  be  maintained  until  the 
conclusion  of  the  case. 

While  the  accounting  of  disclosures, 
when  maintained  apart  from  the  record, 
might  be  considered  a  system  of  records 
under  the  Act,  this  could  lead  to  the  situ¬ 
ation  of  having  to  maintain  an  account¬ 
ing  of  disclosures  from  the  original  ac¬ 
counting  and  having  to  maintain  that 
second  accounting  for  five  years,  etc. 
Note  that  subsection  (c)  (3)  gives  an  in¬ 
dividual  a  right  of  access  to  the  account¬ 
ing  which  would  not  have  been  necessary 
if  the  accounting  were  considered  a  sepa¬ 
rate  system  of  record.  Therefore,  it  would 
seem  that  the  intent  was  to  view  the 
accounting  of  disclosures  as  other  than  a 
system  of  records  and  to  conclude  that  an 
accounting  need  not  be  maintained  for 
disclosures  from  the  accounting  of  dis¬ 
closures. 

Retaining  the  Accounting  of  Dis¬ 
closures.  Subsection  (c)  (2)  “Retain  the 
accounting  made  under  paragraph  (1) 
of  this  subsection  for  at  least  five  years 
or  the  life  of  the  record,  whichever  is 


longer,  after  the  disclosure  for  which  the 
accounting  is  made;*' 

The  purposes  of  the  accounting  are  (1) 
to  allow  individuals  to  learn  to  whom 
records  about  themselves  have  been  dis¬ 
closed  (subsection  (c)  (3) ) ;  (2)  to  pro¬ 
vide  a  basis  for  subsequently  advising  re¬ 
cipients  of  records  of  any  corrected  or 
disputed  records  (subsection  (c)  (4)  ; 
and  (3)  to  provide  an  audit  trail  for  sub¬ 
sequent  reviews  of  agency  compliance 
with  subsection  (b)  (conditions  of  dis¬ 
closure)  .  As  discussed  above,  with  respect 
to  maintaining  the  accounting,  the  ac¬ 
counting  need  not  be  retained  on  a  record 
by  record  basis  as  long  as  the  procedures 
adopted  by  the  agency  permit  it  to  satisfy 
these  objectives.  While  the  accounting  is 
required  to  be  maintained  for  at  least 
five  years,  nothing  in  the  Act  requires 
the  retention  of  the  record  itself  where 
the  record  could  otherwise  lawfully  be 
disposed  of  sooner. 

The  accounting  is  required  to  be  re¬ 
tained  for  five  years  from  the  date  of 
the  disclosure  unless  the  record  is  re¬ 
tained  longer.  Record  retention  stand¬ 
ards  remain  as  prescribed  in  applicable 
law  and  GSA  regulations. 

Making  the  Accounting  of  Disclosures 
Available  to  the  Individual.  Subsection 
(c)(3)  “Except  for  disclosures  made 
under  subsection  (b)  (7)  of  this  section, 
make  the  accounting  made  under  para¬ 
graph  (1)  of  this  subsection  available  to 
the  individual  named  in  the  record  at  his 
request;” 

Upon  request  of  the  individual  to  whom 
the  record  pertains  an  agency  must  make 
available  to  that  individual  all  informa¬ 
tion  in  its  accounting  of  disclosures  ex¬ 
cept  those  pertaining  to  disclosures  to 
another  agency  or  government  instru¬ 
mentality  for  law  enforcement  purposes 
pursuant  to  subsection  (b)  (7)  unless  the 
system  has  been  exempted  from  this  pro¬ 
vision  pursuant  to  subsections  (j)  or  (k) . 
Agencies  may  wish  to  maintain  the  ac¬ 
counting  of  disclosure  in  such  a  manner 
that  notations  of  disclosures  pursuant  to 

(b)  (7)  are  readily  segregable  in  order  to 
facilitate  timely  release  of  the  disclosure 
accounting  when  requested  by  the  in¬ 
dividual.  Since  the  accounting  will  often 
not  be  maintained  in  a  form  which  is 
readily  comprehensible  to  the  individual, 
the  process  of  “making  the  accounting 
available”  may  entail  some  transforma¬ 
tion  of  the  accounting  by  the  agency  so 
as  to  make  it  intelligible  to  the  individual. 
This  may  require  the  agency  to  compile, 
from  the  accounting,  a  list  of  those  to 
whom  the  record  was  disclosed. 

Informing  Prior  Recipients  of  Cor¬ 
rected  or  Disputed  Records.  Subsection 

(c)  (4)  “Inform  any  person  or  other 
agency  about  any  correction  or  notation 
of  dispute  made  by  the  agency  in  accord¬ 
ance  with  subsection  (d)  of  this  section 
of  any  record  that  has  been  disclosed  to 
the  person  or  agency  if  an  accounting  of 
the  disclosure  was  made.” 

When  a  record  is  corrected  at  the  re¬ 
quest  of  an  individual  acting  in  accord¬ 
ance  with  subsection  (d)  (2)  or  a  state¬ 
ment  of  dispute  is  filed  as  provided  in 
subsection  (d)  (3),  the  agency  maintain¬ 


ing  the  record  shall  notify  each  agency 
or  person  to  which  the  record  has  been 
disclosed  of  the  exact  nature  of  the  cor¬ 
rection  or  that  a  notation  of  dispute  has 
made.  If  the  recipient  was  another 
agency,  that  agency  is  required,  in  turn, 
to  notify  those  to  whom  it  disclosed  the 
record. 

This  requirement  does  not  apply  to 
disclosures  to  personnel  within  the 
agency  with  a  “need  to  know”  or  to  the 
public  under  the  Freedom  of  Informa¬ 
tion  Act  (subsections  (b)(1)  and  (2)) 
or  to  disclosures  made  prior  to  Septem¬ 
ber  27,  1975  for  which  no  accounting  was 
made.  (Note  that  the  language  in  sub¬ 
section  (c)  (4)  differs  from  the  corre¬ 
sponding  language  in  H.R.  16373  so  that 
the  House  report  discussion  of  this  pro¬ 
vision  is  no  longer  applicable). 

Given  the  definition  of  “record”  (a 
record  may  be  construed  to  be  a  part  of 
another  record)  and  the  language  of 
subsection  (d)  (4) ,  below,  it  would  appear 
that  the  notification  of  correction  or  of 
the  filing  of  a  statement  of  disagreement 
is  required  only  to  the  extent  that  the 
correction  or  disagreement  pertains  to 
the  information  actually  disclosed;  i.e., 
recipients  of  a  portion  of  a  record  other 
than  the  portion  which  is  subsequently 
corrected  or  disputed  need  not  be  in¬ 
formed.  Where  there  is  any  doubt  as  to 
whether  the  corrected  information  was 
included  in  or  might  be  relevant  to  a 
previous  disclosure,  agencies  should 
notify  the  recipients  in  question. 

The  language  of  this  subsection  ex¬ 
plicitly  requires  only  that  prior  recipients 
be  notified  of  corrections  made  pursuant 
to  a  request  to  amend  a  record  by  an 
individual  and  does  not  address  records 
corrected  for  other  reasons;  e.g.,  agency 
staff  detects  erroneous  data  or  a  third 
party  source  provides  corrected  informa¬ 
tion.  Nevertheless,  agencies  are  encour¬ 
aged  to  provide  corrected  information  to 
previous  recipients,  irrespective  of  the 
means  by  which  the  correction  was  made 
whenever  it  is  deemed  feasible  to  do  so 
if  information  included  in  a  previous  dis¬ 
closure  was  changed  particularly  when 
the  agency  is  aware  that  the  correction 
is  relevant  to  the  recipient’s  uses  irre¬ 
spective  of  the  means  by  which  the  cor¬ 
rection  is  made. 

Subsection  (d)  Access  to  Records 

Subsection  (d)  “Each  agency  that 
maintains  a  system  of  record  shall — ” 

Individual  Access  to  Records.  Subsec¬ 
tion  (d)(1)  “Upon  request  by  an  indi¬ 
vidual  to  gain  access  to  his  record  or  to 
any  information  pertaining  to  him  which 
is  contained  in  the  system,  permit  him 
and  upon  his  request,  a  person  of  his  own 
choosing  to  accompany  him,  to  review 
the  record  and  have  a  copy  made  of  all 
or  any  portion  thereof  in  a  form  com¬ 
prehensible  to  him,  except  that  the 
agency  may  require  the  individual  to 
furnish  a  written  statement  authorizing 
discussion  of  that  individual’s  record  in 
the  accompanying  person’s  presence;” 

An  agency  must,  upon  request:  (1) 
Inform  an  individual  whether  a  system 
of  records  contains  a  record  or  records 
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pertaining  to  him,  (2)  permit  an  indi¬ 
vidual  to  review  any  record  pertaining 
to  him  which  is  contained  in  a  system 
of  records,  (3)  permit  the  individual  to 
be  accompanied  for  the  purpose  by  a 
person  of  his  choosing,  and  (4)  permit 
the  individual  to  obtain  a  copy  of  any 
such  record  in  a  form  comprehensible  to 
him  at  a  reasonable  cost.  This  provision 
it  should  be  noted,  gives  an  individual 
the  right  of  access  only  to  records  which 
are  contained  in  a  system  of  records. 
See  (a)  (5),  above. 

This  language  further  suggests  that 
the  Congress  did  not  intend  to  require 
that  an  individual  be  given  access  to  in¬ 
formation  which  the  agency  does  not 
retrieve  by  reference  to  his  or  her  name 
or  some  other  identifying  particular.  See 
subsection  (a)(5).  If  an  individual  is 
named  in  a  record  about  someone  else 
(or  some  other  type  of  entity)  and  the 
agency  only  retrieves  the  portion  per¬ 
taining  to  him  by  reference  to  the  other 
person’s  name  (or  some  organization/ 
subject  identifier) ,  the  agency  is  not  re¬ 
quired  to  grant  him  access.  Indeed,  if 
this  were  not  the  case,  it  would  be  nec¬ 
essary  to  establish  elaborate  cross- 
references  among  records,  thereby  in¬ 
creasing  the  potential  for  privacy  abuses. 
The  following  examples  illustrate  some 
applications  of  this  standard. 

1.  A  record  on  Joan  Doe  as  an  employee 
in  a  file  of  employees  from  which  mate¬ 
rial  is  accessed  by  reference  to  her  name 
(or  some  identifying  number).  This  is 
the  simplest  case  of  a  record  in  a  system 
of  records  and  Joan  Doe  would  have  a 
right  of  access. 

2.  A  reference  to  Joan  Doe  in  a  record 
about  James  Smith  in  the  same  file.  This 
is  also  a  record  within  a  system  but  Joan 
Doe  would  not  have  to  be  granted  access 
unless  the  agency  had  devised  and  used 
an  Indexing  capability  to  gain  access  to 
her  record  in  James  Smith’s  file. 

3.  A  record  about  Joan  Doe  in  a  con¬ 
tract  source  evaluation  file  about  her 
employer.  Corporation  X,  which  1s  not 
accessed  by  reference  to  individuals’ 
names,  or  other  identifying  particulars, 
■nils  is  a  record  which  is  not  in  a  system 
of  records  and,  therefore,  Joan  Doe 
would  not  have  a  right  of  access  to  it. 
If,  as  in  2,  above,  an  indexing  capability 
were  developed  and  used,  however,  such 
a  system  would  become  a  system  of  rec¬ 
ords  to  which  Joan  Doe  would  have  a 
right  of  access. 

Agencies  may  establish  fees  for  making 
copies  of  an  individual’s  record  but  not 
for  the  cost  of  searching  for  a  record  or 
reviewing  it  (subsection  (f)(5)).  When 
the  agency  makes  a  copy  of  a  record  as  a 
necessary  part  of  its  process  of  making 
the  record  available  for  review  (as  dis¬ 
tinguished  from  responding  to  a  request 
by  an  individual  for  a  copy  of  a  record) , 
no  fee  may  be  charged.  It  should  be  noted 
that  this  provision  differs  from  the  ac¬ 
cess  and  fees  provisions  of  the  Freedom 
of  Information  Act. 

The  granting  of  access  may  not  be  con¬ 
ditioned  upon  any  requirement  to  state 
a  reason  or  otherwise  justify  the  need  to 
gain  access. 


Agencies  shall  establish  requirements 
to  verify  the  identity  of  the  requester. 
Such  requirements  shall  be  kept  to  a 
minimum.  They  shall  only  be  established 
when  necessary  reasonably  to  assure  that 
an  individual  is  not  improperly  granted 
access  to  records  pertaining  to  another 
individual  and  shall  not  unduly  impede 
the  individual’s  right  of  access.  Proce¬ 
dures  for  verifying  identity  will  vary  de¬ 
pending  upon  the  nature  of  the  records 
to  which  access  is  sought.  For  example, 
no  verification  of  identity  will  be  re¬ 
quired  of  individuals  seeking  access  to 
records  which  are  otherwise  available  to 
any  member  of  the  public  under  5  U.S.C. 
552,  the  Freedom  of  Information  Act. 
However,  far  more  stringent  measures 
should  be  utilized  when  the  records 
sought  to  be  accessed  are  medical  or 
other  sensitive  records. 

For  individuals  who  seek  access  in  per¬ 
son,  requirements  for  verification  of 
identity  should  be  limited  to  information 
or  documents  which  an  individual  is 
likely  to  have  readily  available  (e.g.,  a 
driver’s  license,  employee  identification 
card.  Medicare  card) .  However,  if  the  in¬ 
dividual  can  provide  no  other  suitable 
documentation,  the  agency  should  re¬ 
quest  a  signed  statement  from  the  in¬ 
dividual  asserting  his  or  her  identity  and 
stipulating  that  the  individual  under¬ 
stands  that  knowingly  or  willfully  seek¬ 
ing  or  obtaining  access  to  records  about 
another  individual  under  false  pretenses 
is  punishable  by  a  fine  of  up  to  $5,000, 
(Subsection  (i)  (3) .) 

For  systems  to  which  access  is  granted 
by  mail  (by  virtue  of  their  location) 
verification  of  identity  may  consist  of  the 
providing  of  certain  minimum  identify¬ 
ing  data;  e.g.,  name,  date  of  birth,  or 
system  personal  identifier  (if  known  to 
the  individual) .  Where  the  sensitivity  of 
the  data  warrants  it;  (i.e.,  unauthorized 
access  could  cause  harm  or  embarrass¬ 
ment  to  the  individual),  a  signed  nota¬ 
rized  statement  may  be  required  or  other 
reasonable  means  of  verifying  identity 
which  the  agency  may  determine  to  be 
necessary,  depending  on  the  degree  of 
sensitivity  of  the  data  involved. 

Note:  That  section  7  of  the  Act  forbids  an 
agency  to  deny  an  Individual  any  right  (in¬ 
cluding  access  to  a  record)  for  refusing  to 
disclose  a  Social  Security  Number  unless  dis¬ 
closure  is  required  by  Federal  statute  or  by 
other  laws  or  regulations  adopted  prior  to 
January  1,  1975. 

Agencies  are  also  permitted  to  require 
that  an  individual  who  wishes  to  be  ac¬ 
companied  by  another  person  when  re¬ 
viewing  a  record  furnish  a  written  state¬ 
ment  authorizing  discussion  of  his  or  her 
record  in  the  presence  of  the  accompany¬ 
ing  person.  This  provision  may  not  be 
used  to  require  that  Individuals  who  re¬ 
quest  access  and  wish  to  authorize  other 
persons  to  accompany  them  provide  any 
reasons  for  the  access  or  for  the  accom¬ 
panying  person’s  presence.  It  is  designed 
to  avoid  disputes  over  whether  the  in¬ 
dividual  granted  permission  for  disclos¬ 
ure  of  information  to  the  accompanying 
person. 


Agency  procedures  for  complying  with 
the  individual  access  provisions  will  nee-* 
essarily  vary  depending  upon  the  size 
and  nature  of  the  system  of  records. 
Large  computer-based  systems  of  rec¬ 
ords  clearly  require  a  different  approach 
than  do  small,  regionally  dispersed,  man¬ 
ually  maintained  systems.  Nevertheless 
the  basic  requirements  are  constant, 
namely  the  right  of  the  individual  to 
have  access  to  a  record  pertaining  to 
him  and  to  have  a  copy  made  of  all  or 
any  portion  of  such  records  in  a  form 
which  is  comprehensible  to  him.  Putting 
information  into  a  comprehensible  form 
suggests  converting  computer  codes  to 
their  literal  meaning  but  not  necessarily 
an  extensive  tutorial  in  the  agency’s  pro¬ 
cedures  in  which  the  record  is  used. 

Neither  the  requirements  to  grant  ac¬ 
cess  nor  to  provide  copies  necessarily 
require  that  the  physical  record  itself  be 
made  available.  The  form  in  which  the 
record  is  kept  (e.g.,  on  magnetic  tape)  or 
the  context  of  the  record  (e.g.,  access  to 
a  document  may  disclose  records  about 
other  individuals  which  are  not  relevant 
to  the  request)  may  require  that  a  rec¬ 
ord  be  extracted  or  translated  in  some 
manner;  e.g.,  to  expunge  the  identity 
of  a  confidential  source.  Whenever  pos¬ 
sible,  however,  the  requested  record 
should  be  made  available  in  the  form  in 
which  it  is  maintained  by  the  agency  and 
the  extraction  or  translation  process 
may  not  be  used  to  withhold  information 
in  a  record  about  the  individual  who  re¬ 
quests  it  unless  the  denial  of  access  is 
specifically  provided  for  under  rules  is¬ 
sued  pursuant  to  one  of  the  exemption 
provisions  (subsections  (j)  and  (k)). 

Subsection  (f)  (3)  provides  that  agen¬ 
cies  may  establish  “a  special  procedure, 
if  deemed  necessary,  for  the  disclosure 
to  an  individual  of  medical  records.  In¬ 
cluding  psychological  records,  pertain¬ 
ing  to  him.”  In  addressing  this  provi¬ 
sion  the  House  committee  said: 

If,  in  the  judgment  of  the  agency,  the 
transmission  of  medical  Information  direct¬ 
ly  to  a  requesting  Individual  could  have  an 
adverse  effect  upon  such  individual,  the 
rules  which  the  agency  promulgates  should 
provide  means  whereby  an  individual  who 
would  be  adversely  affected  by  receipt  of 
such  data  may  be  apprised  of  it  in  a  manner 
which  would  not  cause  such  adverse  effects. 
An  example  of  a  rule  serving  such  purpose 
would  be  transmission  to  a  doctor  named  by 
the  requesting  individual.  (House  Report  93- 
1416,  pp.  16-17) 

Thus,  while  the  right  of  individuals  to 
have  access  to  medical  and  psychological 
records  pertaining  to  them  is  clear,  the 
nature  and  circumstances  of  the  disclo¬ 
sure  may  warrant  special  procedures. 

While  the  Act  provides  no  specific 
guidance  on  this  subject,  agencies  should 
acknowledge  requests  for  access  to  rec¬ 
ords  within  10  days  of  receipt  of  the  re¬ 
quest  (excluding  Saturdays,  Sundays, 
and  legal  public  holidays).  Wherever 
practicable,  that  acknowledgement 
should  indicate  whether  or  not  access 
can  be  granted  and,  if  so,  when.  When 
access  is  to  be  granted,  agencies  will 
normally  provide  access  to  a  record 
within  30  days  (excluding  Saturdays, 
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Sundays,  and  legal  public  holidays)  un¬ 
less,  for  good  cause  shown,  they  are  un¬ 
able  to  do  so,  In  which  case  the  individ¬ 
ual  should  be  informed  in  writing  within 
30  days  as  to  those  reasons  and  when  it 
is  anticipated  that  access  will  be  granted. 

A  “good  cause’’  might  be  the  fact  that 
the  record  is  inactive  and  stored  in  a 
records  center  and,  therefore,  not  as 
readily  accessible.  See  subsection  (1)  (1). 
Presumably,  in  such  cases  the  risk  of  an 
adverse  determination  being  made  on 
the  bases  of  a  record  to  which  access  is 
sought  and  which  the  individual  might 
choose  to  challenge  is  relatively  low. 

Requests  for  Amending  Records.  Sub¬ 
section  (d)  (2)  “Permit  the  individual  to 
request  amendment  of  a  record  pertain¬ 
ing  to  him  and — ” 

Agencies  shall  establish  procedures  to 
give  individuals  the  opportunity  to  re¬ 
quest  that  their  records  be  amended.  The 
procedures  may  permit  the  individual 
to  present  a  request  either  in  person,  by 
telephone,  or  through  the  mail  but  the 
process  should  not  normally  require  that 
the  individual  present  the  request  in 
person.  If  the  agency  deems  it  appropri¬ 
ate,  it  may  require  the  requests  be  made 
in  writing,  whether  presented  in  person 
or  through  the  mail.  Instructions  for 
the  preparation  of  a  request  and  any 
forms  employed  should  be  as  brief  and 
as  simple  as  possible.  If  a  request  is  re¬ 
ceived  on  other  than  a  prescribed  form, 
the  agency  should  not  reject  it  or  request 
resubmission  unless  additional  informa¬ 
tion  is  essential  to  process  the  request. 
In  that  case,  the  inquiry  to  the  individ¬ 
ual  should  be  limited  to  obtaining  the 
needed  additional  information,  not  re¬ 
submission  of  the  entire  request.  Incom¬ 
plete  or  inaccurate  requests  should  not 
be  rejected  categorically.  The  individual 
should  be  asked  to  clarify  the  request  as 
needed.  Requests  presented  in  person 
should  be  screened  briefly  while  the  indi¬ 
vidual  is  still  present,  wherever  possible, 
to  assure  that  the  request  is  complete  so 
that  clarification  may  be  obtained  on  the 
spot. 

These  provisions  for  amending  records 
are  not  intended  to  permit  the  alteration 
of  evidence  presented  in  the  course  of  ju¬ 
dicial,  quasi-judicial  or  quasi-legislative 
proceedings.  Any  changes  in  such  records 
should  be  made  only  through  the  estab¬ 
lished  procedures  consistent  with  the  ad¬ 
versary  process.  These  provisions  are  not 
designed  to  permit  collateral  attack  upon 
that  which  has  already  been  the  subject 
of  a  judicial  or  quasi-judicial  action.  For 
example,  these  provisions  are  not  de¬ 
signed  to  permit  an  individual  to  chal¬ 
lenge  a  conviction  for  a  criminal  offense 
received  in  another  forum  or  to  reopen 
the  assessment  of  a  tax  liability,  but  the 
individual  would  be  able  to  challenge  the 
fact  that  conviction  or  liability  has  been 
inaccurately  recorded  in  his  records. 

The  agency  should  also  require  verifi¬ 
cation  of  identity  to  assure  that  the  re¬ 
questors  are  seeking  to  amend  records 
pertaining  to  themselves  and  not,  inad¬ 
vertently  or  intentionally,  the  records  of 
other  Individuals. 

Acknowledgement  of  Requests  to 


Amend  Records.  Subsection  (d)  (2)  (A) 
“Not  later  than  10  days  (excluding,  Sat¬ 
urdays,  Sundays,  and  legal  public  holi¬ 
days)  after  the  date  of  receipt  of  such 
request,  acknowledge  in  writing  such  re¬ 
ceipt;  and’’ 

A  written  acknowledgement  by  the 
agency  of  the  receipt  of  a  request  to 
amend  a  record  must  be  provided  to  the 
individual  within  10  days  (excluding 
Saturdays,  Sundays,  and  legal  public 
holidays).  The  acknowledgement  should 
clearly  describe  the  request  (a  copy  of 
the  request  form  may  be  appended  to  the 
acknowledgement)  and  advise  the  indi¬ 
vidual  when  he  or  she  may  expect  to  be 
advised  of  action  taken  on  the  request. 

No  separate  acknowledgement  of  re¬ 
ceipt  is  necessary  if  the  request  can  be 
reviewed,  processed,  and  the  individual 
advised  of  the  results  of  the  review 
(whether  complied  with  or  denied) 
within  the  io-day  period. 

For  requests  presented  in  person,  writ¬ 
ten  acknowledgement  should  be  provided 
at  the  time  the  request  is  presented. 

Actions  Required  on  Requests  to 
Amend  Records.  Subsection  (d)  (2)  (B) 
“Promptly,  either 

(i)  Make  any  correction  of  any  portion 
thereof  which  the  individual  believes  is  not 
accurate,  relevant,  timely,  or  complete;  or 

(li)  Inform  the  Individual  of  its  refusal  to 
amend  the  record  in  accordance  with  his  re¬ 
quest.  the  reason  for  the  refusal,  the  proce¬ 
dures  established  by  the  agency  for  the  indi¬ 
vidual  to  request  a  review  of  the  refusal  by 
the  head  of  the  agency  or  an  officer  desig¬ 
nated  by  the  head  of  the  agency,  and  the 
name  and  business  address  of  that  official; 

In  reviewing  an  individual’s  request  to 
amend  a  record,  agencies  should,  wher¬ 
ever  practicable,  complete  the  review 
and  advise  the  individual  of  the  results 
within  10  days  of  the  receipt  of  the  re¬ 
quest.  Prompt  action  is  necessary  both 
to  assure  that  records  are  as  accurate 
as  possible  and  to  reduce  the  adminis¬ 
trative  effort  which  would  otherwise  be 
involved  in  issuing  a  separate  acknowl¬ 
edgement  of  the  receipt  of  the  request 
and  subsequently  informing  the  indi¬ 
vidual  of  the  action  taken.  If  the  nature 
of  the  request  or  the  system  of  records 
precludes  completing  the  review  within 
10  days,  the  required  acknowledgement 
(subsection  (d)  (2)  (A)  above,)  must  be 
provided  within  ten  days  and  the  review 
should  be  completed  as  soon  as  reason¬ 
ably  possible,  normally  within  30  days 
from  the  receipt  of  the  request  (exclud¬ 
ing  Saturdays,  Sundays,  and  legal  public 
holidays)  unless  unusual  circumstances 
preclude  completing  action  within  that 
time.  (The  number  of  cases  on  which 
the  agency  was  unable  to  act  within  30 
days  will  be  included  in  the  annual  re¬ 
port  (subsection  (p)).  If  the  expected 
completion  date  for  the  review  indicated 
in  the  acknowledgement  cannot  be  met, 
the  individual  should  be  advised  of  that 
delay  and  of  a  revised  date  when  the 
review  may  be  expected  to  be  completed. 

“Unusual  circumstances’*  can  be 
viewed  as  situations  in  which  records 
cannot  be  reviewed  through  the  agency’s 
normal  process.  By  definition,  such  cases 
would,  statistically,  be  the  exception.  A 


review  which  entails  obtaining  support¬ 
ing  data  from  retired  records  or  from 
another  agency  and  which  could  not, 
therefore  be  completed  within  the  re¬ 
quired  time  might  qualify. 

In  reviewing  a  record  in  response  to  a 
request  to  amend  it,  the  agency  should 
assess  the  accuracy,  relevance,  timeli¬ 
ness,  or  completeness  of  the  record  in 
terms  of  the  criteria  established  in  sub¬ 
section  (e)  (5) ,  i.e.,  to  assure  fairness  to 
the  individual  to  whom  the  record  per¬ 
tains  in  any  determination  about  that 
individual  which  may  be  made  on  the 
basis  of  that  record. 

With  respect  to  requests  to  delete  in¬ 
formation,  agencies  must  heed  the  cri¬ 
teria  established  in  subsection  (e)(1), 
namely,  that  the  information  must  be 
“*  *  •  relevant  and  necessary  to  ac¬ 
complish  a  statutory  purpose  of  the 
agency  required  to  be  accomplished  by 
law  or  by  executive  order  of  the  Presi¬ 
dent.”  This  is  not  to  suggest  that  agen¬ 
cies  may  routinely  maintain  irrelevant 
or  unnecessary  information  unless  it  is 
challenged  by  an  individual,  but  rather 
that  receipt  of  a  request  to  delete  infor¬ 
mation  should  cause  the  agency  to  re¬ 
consider  the  need  for  such  information. 
Reviews  in  connection  with  the  develop¬ 
ment  of  a  system,  the  preparation  of  the 
public  notice  and  the  description  of  the 
purposes  for  which  it  is  maintained  and 
periodic  reviews  of  the  system,  to  assure 
that  only  information  which  is  neces¬ 
sary  for  the  lawful  purposes  for  which 
the  system  of  records  was  established  is 
maintained  in  it  will  be  the  primary 
vehicles  for  assuring  that  only  relevant 
and  necessary  information  is  main¬ 
tained. 

Agency  standards  for  reviewing  records 
in  response  to  a  request  to  amend  them 
may,  at  the  agency’s  option,  be  included 
as  part  of  the  rules  promulgated  pursu¬ 
ant  to  subsection  (f)(4).  Generally,  it 
would  seem  reasonable  to  conclude  that 
such  standards  for  review  need  be  no 
more  stringent  than  is  reasonably  neces¬ 
sary  to  meet  the  general  criteria  in  sub¬ 
sections  (e)(1)  and  (e)(5)  for  accuracy, 
relevance,  timeliness,  and  completeness. 

Judicial  review  is  available  for  agenc; 
determinations  to  grant  an  individual 
access  and  to  amend  or  not  amend  a 
record  pertaining  to  the  individual.  While 
the  definite  burden  of  proof  for  granting 
access  is  upon  the  agency  in  such  judicial 
review,  in  the  judicial  review  of  the  re¬ 
fusal  of  an  agency  to  amend  a  record 
there  is  no  similar  burden  upon  the 
agency.  An  analogous  standard  may  be 
utilized  by  the  agencies  in  establishing 
standards  for  review  of  individual  re¬ 
quests  for  amendments  of  records.  The 
burden  of  going  forward  could  be  placed 
upon  the  individual  who  in  most  in¬ 
stances  will  know  better  than  the  agency 
the  reasons  why  the  record  should  be 
amended.  It  would  be  appropriate,  in 
agency  regulations  setting'  forth  the 
standards  they  will  use  upon  review  of 
such  request,  that  the  individual  be  re¬ 
quired  to  supply  certain  information  in 
support  of  his  request  for  amendment  of 
the  record.  The  request  would  then  be 
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appropriate  for  resolution  upon  deter¬ 
mination  of  preponderance  of  evidence. 

If  the  agency  agrees  with  the  indi¬ 
vidual’s  request  to  amend  a  record,  the 
agency  shall — 

Advise  the  individual; 

Correct  the  record  accordingly;  and 

Where  an  accounting  of  disclosures  has 
been  made,  advise  all  previous  recipients 
of  the  record  of  the  fact  that  the  cor¬ 
rection  was  made  and  the  substance  of 
the  correction. 

If  the  agency,  after  its  initial  review  of 
a  request  to  amend  a  record,  disagrees 
with  all  or  any  portion  thereof,  the 
agency  shall 

To  the  extent  that  the  agency  agrees 
with  any  part  of  the  individual’s  request 
to  amend,  proceed  as  described  above 
with  respect  to  those  portions  of  the 
record  which  it  has  amended. 

Advise  the  individual  of  its  refusal  and 
the  reasons  therefor  including  the  crite¬ 
ria  for  determining  accuracy  which  were 
employed  by  the  agency  in  conducting 
the  review; 

Inform  the  individual  that  he  or  she 
may  request  a  further  review  by  the 
agency  head  or  by  an  officer  of  the  agency 
designated  by  the  agency  head;  and 

Describe  the  procedures  for  requesting 
such  a  review  including  the  name  and 
address  of  the  official  to  whom  the  re¬ 
quest  should  be  directed.  The  procedures 
should  be  as  simple  and  brief  as  possible 
and  should  indicate  where  the  individual 
can  seek  advice  or  assistance  in  obtaining 
such  a  review. 

If  the  recipient  of  the  corrected  infor¬ 
mation  is  an  agency  and  is  maintaining 
the  information  which  was  corrected  in 
a  system  of  records,  it  must  correct  its 
records  and,  under  subsection  (c)  (4) ,  ap¬ 
prise  any  agency  or  person  to  which  it 
had  disclosed  the  record  of  the  substance 
of  the  correction.  Subsequent  recipient 
agencies  should  similarly  correct  their 
records  and  advise  those  to  whom  they 
had  disclosed  it.  Agencies  are  encouraged 
to  establish  in  their  regulations,  time 
limits  by  which,  except  under  unusual 
circumstances,  transferees  of  any 
amendment  to  a  record. 

Requesting  a  Review  of  the  Agency’s 
Refusal  To  Amend  a  Record.  Subsection 
(d)  (3)  “Permit  the  Individual  who  dis¬ 
agrees  with  the  refusal  of  the  agency  to 
amend  his  record  to  request  a  review  of 
such  refusal,  and  not  later  than  30  days 
(excluding  Saturdays,  Sundays,  and  legal 
public  holidays)  from  the  date  on  which 
the  Individual  requests  such  review,  com¬ 
plete  such  review,  and  make  a  final  de¬ 
termination  unless,  for  good  cause 
shown,  the  head  of  the  agency  extends 
such  30-day  period;  and  if,  after  his  re¬ 
view,  the  reviewing  official  also  refuses  to 
amend  the  record  in  accordance  with  the 
request,  permit  the  individual  to  file  with 
the  agency  a  concise  statement  setting 
forth  the  reasons  for  his  disagreement 
with  the  refusal  of  the  agency,  and  notify 
the  individual  of  the  provisions  for  judi¬ 
cial  review  of  the  reviewing  official’s  de¬ 
termination  under  subsection  (g)  (1)  (A) 
of  this  section;” 


An  individual  who  disagrees  with  an 
agency’s  initial  refusal  to  amend  a  record 
may  file  a  request  for  further  review  of 
that  determination.  The  agency  head  or 
an  officer  of  the  agency  designated  in 
writing  by  the  agency  head  should  under¬ 
take  an  independent  review  of  the  ini¬ 
tial  determination.  If  someone  other 
than  the  agency  head  is  designated  to 
conduct  the  review,  it  should  be  an  offi¬ 
cer  who  is  organizationally  independent 
of  or  senior  to  the  officer  or  employee  who 
made  the  initial  determination.  For  pur¬ 
poses  of  this  section,  an  “officer”  is  de¬ 
fined  to  be  “•  •  *  a  justice  or  judge  of 
the  United  States  and  an  individual  who 
is — 

(1)  Required  by  law  to  be  appointed  in 
the  civil  [or  military]*  service  by  one  of  the 
following  acting  in  an  official  capacity — 

|  *It  is  assumed  that,  while  the  language 
above  does  not  specifically  cover  it,  a  military 
officer  otherwise  qualified  as  the  reviewing 
official  would  be  permitted  to  serve  as  the 
reviewing  official.] 

(A)  The  President; 

(B)  A  court  of  the  United  States; 

(C)  The  head  of  an  Executive  agency;  or 

(D)  The  Secretary  of  a  military  depart¬ 
ment; 

(2)  Engaged  in  the  performance  of  a  Fed¬ 
eral  function  under  authority  of  law  or  an 
Executive  act;  and 

(3)  Subject  to  the  supervision  of  an  au¬ 
thority  named  by  paragraph  (1)  of  this  sec¬ 
tion,  or  the  Judicial  Conference  of  the 
United  States,  while  engaged  in  the  per¬ 
formance  of  the  duties  of  his  office.  (5  U.S.C. 
2104(a)). 

Delegations  must  be  made  in  writing. 
In  conducting  the  review,  the  reviewing 
official  should  use  the  criteria  of  ac¬ 
curacy,  relevance,  timeliness,  and  com¬ 
pleteness  discussed  above.  The  reviewing 
official  may,  at  his  or  her  option,  seek 
such  additional  Information  as  is  deemed 
necessary  to  satisfy  those  criteria;  i.e., 
to  establish  that  the  record  contains 
only  that  information  which  is  necessary 
and  is  as  accurate,  timely,  and  complete 
as  necessary  to  assure  fairness  in  any  de¬ 
termination  which  may  be  made  about 
the  individual  on  the  basis  of  record. 

Although  there  is  no  requirement  for 
a  formal  hearing,  pursuant  to  the  pro¬ 
visions  of  5  U.S.C.  556,  the  agency  may 
elect  generally  or  on  a  case  by  case  basis 
to  use  such  or  similar  procedures.  The 
procedures  elected  by  the  agency,  how¬ 
ever,  should  insure  fairness  to  the  indi¬ 
vidual  and  promptness  in  the  determi¬ 
nation.  The  procedures  should  provide 
that  as  much  of  the  information  upon 
which  the  determination  is  based  as  pos¬ 
sible  Is  part  of  the  written  record  con¬ 
cerning  the  appeal.  The  records  of  the 
appeal  process  should  be  maintained  by 
agencies  only  as  long  as  Is  reasonably 
necessary  for  purposes  of  judicial  review 
of  the  agency’s  refusal  to  amend  a  record 
upon  appeal. 

If,  after  conducting  this  review,  the 
reviewing  official  also  refuses  to  amend 
the  record  in  accordance  with  the  indi¬ 
vidual’s  request,  the  agency  shall  advise 
the  individual: 

Of  Its  refusal  and  the  reasons  there¬ 
for; 


Of  his  or  her  right  to  file  a  concise 
statement  of  the  individual’s  reasons  for 
disagreeing  with  the  decision  of  the 
agency; 

Of  the  procedures  for  filing  a  state¬ 
ment  of  disagreement; 

That  any  such  statement  will  be  made 
available  to  anyone  to  whom  the  record 
is  subsequently  disclosed  together  with, 
if  the  agency  deems  it  appropriate,  a 
brief  statement  by  the  agency  sum¬ 
marizing  its  reasons  for  refusing  to 
amend  the  record; 

That  prior  recipients  of  the  disputed 
record  will  be  provided  a  copy  of  any 
statement  of  dispute  to  the  extent  that 
an  accounting  of  disclosures  was  main¬ 
tained  (see  subsection  (c)  (4) ) ;  and 

Of  his  or  her  right  to  seek  judicial  re¬ 
view  of  the  agency’s  refusal  to  amend  a 
record  provided  for  in  subsection 
(g)  (1)  (A) ,  below. 

If  the  reviewing  official  determines  that 
the  record  should  be  amended  in  accord¬ 
ance  with  the  individual’s  request,  the 
agency  should  proceed  as  prescribed  in 
subsection  (d)  (2)  (B)  (i),  above;  namely, 
correct  the  record,  advise  the  individual, 
and  inform  previous  recipients. 

A  notation  of  a  dispute  is  required  to 
be  made  only  if  an  individual  informs  the 
agency  of  his  or  her  disagreement  with 
the  agency’s  determination  under  sub¬ 
section  (d)  (3)  (appeals  procedure)  not 
to  amend  a  record. 

A  final  agency  determination  on  the 
individual’s  request  for  a  review  of  an 
agency’s  initial  refusal  to  amend  a  record 
must  be  completed  within  30  days  unless 
the  agency  head  determines  that  a  fair 
and  equitable  review  cannot  be  completed 
in  that  time.  If  additional  time  is  re¬ 
quired,  the  individual  should  be  informed 
in  writing  of  the  reasons  for  the  delay 
and  of  the  approximate  date  on  which 
the  review  is  expected  to  be  completed. 
Such  extensions  should  not  be  routine 
and  should  not  normally  exceed  an  addi¬ 
tional  thirty  days.  Agencies  will  be  re¬ 
quired  to  report  the  number  of  cases  in 
which  review  was  not  completed  within 
30  days  as  part  of  the  annual  report 
(subsection  (p)). 

Disclosure  of  disputed  information. 
Subsection  (d)  (4)  “In  any  disclosure, 
containing  Information  about  which  the 
individual  has  filed  a  statement  of  dis¬ 
agreement,  occurring  after  the  filing  of 
the  statement  under  paragraph  (3)  of 
this  subsection,  clearly  note  any  portion 
of  the  record  which  is  disputed  and  pro¬ 
vide  copies  of  the  statement  and,  if  the 
agency  deems  it  appropriate,  copies  of  a 
concise  statement  of  the  reasons  of  the 
agency  for  not  making  the  amendments 
requested,  to  persons  or  other  agencies 
to  whom  the  disputed  record  has  been 
disclosed”; 

When  an  individual  files  a  statement 
disagreeing  with  the  agency’s  decision 
not  to  amend  a  record,  the  agency  should 
clearly  annotate  the  record  so  that  the 
fact  that  the  record  is  disputed  is  ap¬ 
parent  to  anyone  who  may  subsequently 
access,  use,  or  disclose  it.  The  notation 
Itself  should  be  integral  to  the  record 
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and  specific  to  the  portion  in  dispute. 
For  automated  systems  of  records,  the 
notation  may  consist  of  a  special  indica¬ 
tor  on  the  entire  record  or  the  specific 
part  of  the  record  in  dispute. 

The  statements  of  dispute  need  not  be 
maintained  as  an  integral  part  of  the 
records  to  which  they  pertain.  They 
should,  however,  be  filed  in  such  a  man¬ 
ner  as  to  permit  them  to  be  retrieved 
readily  whenever  the  disputed  portion  of 
the  record  is  to  be  disclosed. 

If  there  is  any  question  as  to  whether 
the  dispute  pertains  to  information  being 
disclosed,  the  statement  of  dispute 
should  be  included. 

When  information  which  is  the  subject 
of  a  statement  of  dispute  is  subsequently 
disclosed,  agencies  must  note  that  the  in¬ 
formation  is  disputed  and  provide  a  copy 
of  the  individual’s  statement. 

Agencies  may,  at  their  discretion,  in¬ 
clude  a  brief  summary  of  their  reasons 
for  not  making  a  correction  when  dis¬ 
closing  disputed  information.  Such  state¬ 
ments  will  normally  be  limited  to  the 
reasons  stated  to  the  individual  under 
subsection  (d)  (2)  (B)  (ii)  and  (d)  (3) , 
above.  Copies  of  the  agency’s  statement 
need  not  be  maintained  as  an  integral 
part  of  the  record  but  will  be  treated  as 
part  of  the  individual’s  record  for  pur¬ 
poses  of  granting  the  individual  access, 
subsection  (d)(1).  However,  the  agency’s 
statement  will  not  be  subject  to  subsec¬ 
tions  (d)  (2)  or  (3)  (amending  records) . 

Access  to  Information  Compiled  in 
Anticipation  of  Civil  Action.  Subsection 
(d)  (5)  “Nothng  in  this  section  shall  al¬ 
low  an  individual  access  to  any  informa¬ 
tion  compiled  in  reasonable  anticipation 
of  a  civil  action  or  proceeding.” 

This  provision  is  not  intended  to  pre¬ 
clude  access  by  an  individual  to  records 
which  are  available  to  that  individual 
under  other  procedures  (e.g.,  pre-trial 
discovery) .  It  is  intended  to  preclude  es¬ 
tablishing  by  this  Act  a  basis  for  access 
to  material  being  prepared  for  use  in 
litigation  other  than  that  established 
under  other  processes  such  as  the  Free¬ 
dom  of  Information  Act  or  the  rules  of 
civil  procedure. 

Eyerpts  from  the  House  floor  debate 
on  this  provision  suggest  that  this  provi¬ 
sion  was  not  intended  to  cover  access  to 
systems  of  records  compiled  or  used  for 
purposes  other  than  litigation. 

Mr.  Erlenborn.  Mr.  Chairman,  as  I  under¬ 
stand  it,  the  purpose  of  the  amendment  is  to 
protect,  as  an  example,  the  file  of  the  U.S. 
attorney  or  the  solicitor  that  is  prepared  in 
anticipation  of  the  defense  of  a  suit  against 
the  United  States  for  accident  or  some  such 
thing? 

Mr.  Butler.  That  is  the  subject  we  have  in 
mind. 

Mr.  Erlenborn.  I  appreciate  the  gentle¬ 
man's  concern.  I  think  it  is  a  real  concern, 
and  that  protection  ought  to  be  afforded. 

The  only  problem  I  find  with  that  amend¬ 
ment  is  this:  It  would  presuppose  we  in¬ 
tended  the  defining  of  “record  system”  to 
preclude  that  type  of  record.  I  do  not  think 
we  did. 

If  these  sorts  of  records  are  to  be  con¬ 
sidered  a  record  system  under  the  act,  then 
the  agency  would  have  to  go  through  all  the 
formal  proceedings  of  defining  the  system, 
its  routine  uses,  and  publishing  in  the  Fed¬ 
eral  Register. 


Frankly,  I  do  not  think  the  attorney's  files 
that  are  collected  in  anticipation  of  a  law¬ 
suit  should  be  subject  to  the  application  at 
the  act  in  any  instance,  much  less  the  access 
provision.  It  is  our  concern  in  the  access  pro¬ 
vision  that  it  may  then  presuppose  it  is 
covered  in  the  other  provisions,  and  I  do  not 
think  it  should  be. 

Mr.  Butler.  Mr.  Chairman,  I  share  the 
gentleman's  concern.  When  this  amend¬ 
ment  was  originally  drafted,  it  stated  “ac¬ 
cess  to  any  record”  and  we  struck  the  word, 
“record,"  and  inserted  “information.” 

So  we  made  it  perfeotly  clear  we  were  not 
elevating  an  investigation  with  the  word, 
“record,"  to  the  status  of  records.  We  did 
want  to  make  it  clear  there  was  not  to  be 
such  access,  because  that  access  would  be 
within  the  usual  rules  of  civil  procedure. 

Mr.  Erlenborn.  Mr.  Chairman,  if  the  gen¬ 
tleman  will  yield  further,  it  is  the  gentle¬ 
man's  contention,  under  his  interpretation 
of  the  act,  that  the  other  provisions  would 
not  apply  to  the  attorney's  files  as  well;  is 
that  correct? 

Mr.  Butler.  The  gentleman  is  correct. 

( Congressional  Record,  November  21,  1974 
p.  H 10955). 

While  the  above  passage  refers  pri¬ 
marily  to  the  defense  of  suits  by  the 
government  it  is,  of  course,  equally  ap¬ 
plicable  to  the  assembly  of  information 
in  anticipation  of  government-initiated 
law  suits. 

The  mere  fact  that  records  in  a  sys¬ 
tem  of  records  are  frequently  the  sub¬ 
ject  of  litigation  does  not  bring  those 
systems  of  records  within  the  scope  of 
this  provision.  The  information  must  be 
“compiled  in  reasonable  anticipation  of 
a  civil  action  or  proceeding”  and  there¬ 
fore  the  purpose  of  the  compilation  gov¬ 
erns  the  applicability  of  this  provision. 
It  would  seem  that  in  a  suit  in  which 
governmental  action  or  inaction  is  chal¬ 
lenged  the  provision  generally  would  not 
be  available  until  the  initiation  of  litiga¬ 
tion  or  until  information  began  to  be 
compiled  in  reasonable  anticipation  of 
such  litigation.  Where  the  government  is 
prosecuting  or  seeking  enforcement  of  its 
laws  or  regulations,  this  provision  may  be 
applicable  at  the  outset  if  information 
is  being  compiled  in  reasonable  anticipa¬ 
tion  of  a  civil  action  or  proceeding.  The 
term  civil  proceeding  was  intended  to 
cover  those  quasi-judicial  and  prelimi¬ 
nary  judicial  steps  which  are  the  coun¬ 
terpart  in  the  civil  sphere  of  criminal 
proceedings  as  opposed  to  criminal  liti¬ 
gation.  Although  this  provision  could 
have  the  effect  of  an  exemption  it  is  not 
subject  to  the  formal  rule-making  pro¬ 
cedures  which  govern  the  exemptions 
set  forth  in  subsection  (j)  and  (k). 
Nevertheless,  agencies  should  utilize  the 
specific  exemptions  set  forth  in  subsec¬ 
tions  (j)  and  (k)  to  the  extent  that  they 
are  applicable  before  utilizing  this 
provision. 

Section  (e)  Agency  Requirements 

Section  (e)  “Each  agency  that  main¬ 
tains  a  system  of  records  shall — ” 

Restrictions  on  Collecting  Information 
about  Individuals.  Subsection  (e)(1) 
“Maintain  in  its  records  only  such  infor¬ 
mation  about  an  individual  as  is  relevant 
and  necessary  to  accomplish  a  purpose 
of  the  agency  required  to  be  accom¬ 
plished  by  statute  or  by  executive  order 
of  the  President;” 


A  key  objective  of  the  Act  is  to  reduce 
the  amount  of  personal  information  col¬ 
lected  by  Federal  agencies  to  reduce  the 
risk  of  Intentionally  or  inadvertently  im¬ 
proper  use  of  personal  data.  In  simplest 
terms,  information  not  collected  about 
an  individual  cannot  be  misused.  The  Act 
recognizes,  however,  that  agencies  need 
to  maintain  information  about  indi¬ 
viduals  to  discharge  their  responsibili¬ 
ties  effectively. 

Agencies  can  derive  authority  to  col¬ 
lect  information  about  individuals  in  one 
of  two  ways; 

By  the  Constitution,  a  statute,  or  Ex¬ 
ecutive  order  explicitly  authorizing  or 
directing  the  maintenance  of  a  system 
of  records;  e.g.,  the  Constitution  and  title 
13  of  the  United  States  Code  with  respect 
to  the  Census. 

By  the  Constitution,  a  statute,  or  Ex¬ 
ecutive  order  authorizing  or  directing  the 
agency  to  perform  a  function,  the  dis¬ 
charging  of  which  requires  the  main¬ 
tenance  of  a  system  of  records. 

Each  agency  shall,  with  respect  to  each 
system  of  records  which  it  maintains  or 
proposes  to  maintain,  identify  the  spe¬ 
cific  provision  in  law  which  authorizes 
that  activity.  While  the  Act  does  not  spe¬ 
cifically  require  it,  where  feasible,  this 
statutory  authority  should  also  be  cited 
in  the  annual  public  notice  about  the 
system  published  pursuant  to  subsection 
(e)(4).  The  authority  to  maintain  a  sys¬ 
tem  of  records  does  not  give  the  agency 
the  authority  to  maintain  any  informa¬ 
tion  which  it  deems  useful.  Agencies  shall 
review  the  nature  of  the  information 
which  they  maintain  in  their  systems  of 
records  to  assure  that  it  is,  in  fact,  “rele¬ 
vant  and  necessary”.  Information  may 
not  be  maintained  merely  because  it  is 
relevant;  it  must  be  both  relevant  and 
necessary.  While  this  determination  is, 
in  the  final  analysis,  judgmental,  the  fol¬ 
lowing  types  of  questions  shall  be  con¬ 
sidered  in  making  such  determinations; 

How  does  the  information  relate  to  the 
purpose  (in  law)  for  which  the  system 
is  maintained?  • 

What  are  the  adverse  consequences,  if 
any,  of  not  collecting  that  information? 

Could  the  need  be  met  through  the  use 
of  information  that  is  not  in  individually 
identifiable  form? 

Does  the  information  need  to  be  col¬ 
lected  on  every  individual  who  is  the 
subject  o’f  a  record  in  the  system  or 
would  a  sampling  procedure  suffice? 

At  what  point  will  the  information 
have  satisfied  the  purpose  for  which  it 
was  collected;  i.e.,  how  long  is  it  neces¬ 
sary  to  retain  the  information?  Con¬ 
sistent  with  the  Federal  Records  Act  and 
related  regulations  could  part  of  the 
record  be  purged? 

What  is  the  financial  cost  of  maintain¬ 
ing  the  record  as  compared  to  the  risks/ 
adverse  consequences  of  not  maintaining 
it? 

Is  the  information,  while  generally 
relevant  and  necessary  to  accomplish  a 
statutory  purpose,  specifically  relevant 
and  necessary  only  in  certain  cases?  For 
example  in  establishing  financial  need  as 
part  of  assessing  eligibility  for  a  pro¬ 
gram  for  which  need  is  a  legitimate 
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criterion,  parental  income  may  be  rele¬ 
vant  only  for  certain  applicants. 

Subsection  (e)  (7),  below,  provides  ad¬ 
ditional  criteria  governing  the  mainte¬ 
nance  of  records  on  the  activities  of  in¬ 
dividuals  in  exercising  their  rights  under 
the  First  Amendment. 

This  provision  does  not  authorize 
agencies  to  destroy  records  which  they 
are  required  to  retain  under  the  Federal 
Records  Act. 

Agencies  shall  assess  the  legality  of, 
need  for,  and  relevance  of  the  informa¬ 
tion  contained  or  proposed  to  be  con¬ 
tained  in  each  of  its  systems  of  records 
at  various  times: 

In  preparing  initial  public  notices 
(subsection  (e)  (4) ) . 

In  connection  with  the  initial  design  of 
a  new  system  of  records  (subsection  (o) ) . 

Whenever  any  change  is  proposed  in 
system  of  records  (subsection  (o) ) . 

At  least  annually,  as  part  of  a  regular 
program  of  review  of  its  record-keeping 
practices.  This  should  be  done  for  each 
system  prior  to  reissuance  of  the  public 
notice  unless  a  comprehensive  review  of 
the  system  of  records  was  conducted 
within  the  previous  year  in  connection 
with  the  initiation  of  the  system  or  im¬ 
plementation  of  a  change  to  the  system. 

This  provision  does  not  require  that 
each  agency  conduct  a  detailed  review  of 
the  contents  of  each  record  in  its  posses¬ 
sion.  Rather,  agencies  shall  consider  the 
relevance  of,  and  necessity  for,  the  gen¬ 
eral  categories  of  information  main¬ 
tained  and,  incident  to  using  or  disclos¬ 
ing  any  individual  records,  examine  their 
content  to  assure  compliance  with  this’ 
provision. 

It  should  be  noted  that  subsection  (e) 
is  not  intended  to  interfere  with  the  pres¬ 
entation  of  evidence  by  the  parties  before 
a  quasi- judicial  or  quasi-legislative 
body.  For  example,  a  quasi- judicial  board 
or  commission  need  not  reject  otherwise 
admissible  evidence  because  it  is  prof¬ 
fered  by  a  part  other  than  the  individual 
to  whom  it  relates  or  because  it  is  not 
“necessary”  to  the  decision  or  is  not 
“complete.”  The  normal  rules  of  evidence 
would  contains  to  govern  in  such  situa¬ 
tions. 

Information  is  to  be  Collected  Directly 
from  the  Individual.  Subsection  (e)  (2)' 
“Collect  information  to  the  greatest  ex¬ 
tent  practicable  directly  from  the  sub¬ 
ject  individual  when  the  information 
may  result  in  adverse  determinations 
about  an  individual’s  rights,  benefits  and 
privileges  under  Federal  programs;” 

This  provision  stems  from  a  concern 
that  individuals  may  be  denied  benefits, 
or  that  other  adverse  determinations 
affecting  them  may  be  made  by  Federal 
agencies  on  the  basis  of  information  ob¬ 
tained  from  third  party  sources  which 
could  be  erroneous,  outdated,  irrelevant, 
or  biased.  This  provision  establishes  the 
requirement  that  decisions  under  Federal 
programs  which  affect  an  individual 
should  be  made  on  the  basis  of  informa¬ 
tion  supplied  by  that  individual  for  the 
purpose  of  making  those  determinations 
but  recognizes  the  practical  limitations 
of  this  by  qualifying  the  requirement 
with  the  words  “to  the  extent  practi¬ 


cable”.  The  notion  of  protecting  the  in¬ 
dividual  against  adverse  determinations 
based  on  information  supplied  to  other 
agencies  for  other  purposes  is  also  em¬ 
bodied  in  the  provisions  of  subsection  (b) 
which  constrains  the  transfer  of  records 
between  agencies;  subsection  (d)(2), 
which  gives  individuals  the  opportunity 
to  challenge  the  accuracy  of  agency  rec¬ 
ords  pertaining  to  them;  and  subsection 
(e)  (4)  which  prohibits  the  keeping  of 
secret  files. 

Except  for  certain  “statistical  records” 
(subsection  (a)  (6) ) ,  which,  by  definition, 
are  “not  used  in  whole  or  in  part  in  mak¬ 
ing  a  determination  about  an  individual 
*  *  virtually  any  other  record  could 
be  used,  in  making  a  “determination 
about  an  individual’s  rights,  benefits,  or 
privileges  •  •  •”  including  employment. 
The  practical  effect  of  this  provision  is  to 
require  that  information  collected  for  in¬ 
clusion  in  any  system  of  records,  other 
than  “statistical  records”,  should  be  ob¬ 
tained  directly  from  the  individual  when¬ 
ever  practicable. 

Practical  considerations  (including 
cost)  may  dictate  that  a  third-party 
source,  including  systems  of  recordis 
maintained  by  another  agency,  be  used 
as  a  source  of  information  in  some  cases. 
In  analyzing  each  situation  where  it  pro¬ 
poses  to  collect  personal  information 
from  a  third  party  source,  agencies 
should  consider 

The  nature  of  the  program;  i.e.,  it  may 
well  be  that  the  kind  of  information 
needed  can  only  be  obtained  from  a  third 
party  such  as  investigations  of  possible 
criminal  misconduct; 

The  cost  of  collecting  the  information 
directly  from  the  individual  as  compared 
with  the  cost  of  collecting  it  from  a  third 
party; 

The  risk  that  the  particular  elements 
of  information  proposed  to  be  collected 
from  third  parties,  if  inaccurate,  could 
result  in  an  adverse  determination; 

The  need  to  insure  the  accuracy  of  in¬ 
formation  supplied  by  an  individual  by 
verifying  it  with  a  third  party  or  to  ob¬ 
tain  a  qualitative  assessment  of  his  or  her 
capabilities  (e.g.,  in  connection  with  re¬ 
views  of  applications  for  grants,  contracts 
or  employment) ;  and 

Provisions  for  verifying,  whenever  pos¬ 
sible,  any  such  third-party  information 
with  the  individual  before  making  a  de¬ 
termination  based  on  that  information. 

It  should  be  noted  that  a  determina¬ 
tion  by  Agency  (A)  that  it  is  in  its  best 
interest  and  consistent  with  this  sub¬ 
section  to  obtain  information  about  an 
individual  from  Agency  <B)  instead  of 
directly  from  the  individual  does  not 
constitute,  in  and  of  itself,  sufficient 
grounds  for  Agency  (B)  to  release  that 
information  to  Agency  (A).  Agency  (B) 
is  minimally  required  to  meet  the  re¬ 
quirements  of  any  statutory  constraints 
on  the  permissibility  of  making  a  dis¬ 
closure  to  Agency  (A)  including  the  con¬ 
ditions  of  disclosure,  in  subsection  (b) . 

The  standards  and  procedures  set  forth 
in  the  Federal  Reports  Act  (44  USC  3501) 
as  they  apply  to  other  than  individuals 
as  defined  by  this  Act  remain  the  same. 
When  information  is  sought,  however, 


from  ten  or  more  individuals,  as  defined 
by  the  Privacy  Act,  in  response  to  identi¬ 
cal  questions,  the  Federal  Reports  Act 
requirement  that  the  reporting  burden 
upon  individuals  be  reduced  to  a  mini¬ 
mum  should  not  be  construed  to  override 
the  later  enacted  requirement  that,  to 
the  greatest  practicable  extent,  informa¬ 
tion  pertaining  to  individuals  be  collected 
directly  from  them. 

Informing  Individuals  from  Whom  In¬ 
formation  is  Requested.  Subsection  (e> 
(3)  “Inform  each  individual  whom  it 
asks  to  supply  information,  on  the  form 
which  it  uses  to  collect  the  information 
or  on  a  separate  form  that  can  be  re¬ 
tained  by  the  individual — ” 

This  provision  is  intended  to  assure 
that  individuals  from  whom  information 
about  themselves  is  collected  are  in¬ 
formed  of  the  reasons  for  requesting  the 
information,  how  it  may  be  used,  and 
what  the  consequences  are,  if  any,  of  not 
providing  the  information. 

Implicit  in  this  subsection  is  the  no¬ 
tion  of  informed  consent  since  an  indi¬ 
vidual  should  be  provided  with  sufficient 
information  about  the  request  for  infor¬ 
mation  to  make  an  informed  decision  on 
whether  or  not  to  respond.  Note  however, 
that  the  act  of  informing  the  individual 
of  the  purpose (s)  for  which  a  record  may 
be  used  does  not,  in  and  of  itself,  satisfy 
the  requirement  to  obtain  consent  for 
disclosing  the  record.  See  subsection  (b> , 
conditions  of  disclosure. 

The  information  called  for  in  para¬ 
graphs  (A)  through  (D)  below,  should 
be  included  on  the  information  collection 
form,  on  a  tear-off  sheet  attached  to  the 
form,  or  on  a  separate  sheet  which  the 
individual  can  retain,  whichever  is  most 
practical.  When  information  is  being  col¬ 
lected  in  an  interview,  the  interviewer 
should  provide  the  individual  with  a 
statement  that  the  individual  can  retain. 
However,  the  interviewer  should  also 
orally  summarize  that  information  be¬ 
fore  the  interview  begins.  Agencies  may, 
at  their  discretion,  ask  the  individuals 
to  acknowledge  in  writing  that  they  have 
been  duly  informed. 

While  this  provision  does  not  explicitly 
require  it,  agencies  should,  where  feasi¬ 
ble,  inform  third-party  sources  of  the 
purposes  for  which  information  which 
they  are  asked  to  provide  will  be  used. 
In  addition,  the  agency  may,  under  cer¬ 
tain  circumstances,  assure  a  source  that 
his  or  her  identity  will  not  be  revealed 
to  the  subject  of  the  record  (see  subsec¬ 
tion  (k>  (2),  (5),  and  (7)).  The  appro¬ 
priate  use  of  third-party  sources  is  dis¬ 
cussed  in  subsection  (e)(2)  above. 

In  providing  the  information  required 
by  subsections  (e)(3)  (A)  through  (D), 
below,  care  should  be  exercised  to  assure 
that  easily  understood  language  is  used 
and  that  the  material  is  explicit  and 
informative  without  being  so  lengthy  as 
to  deter  an  individual  from  reading  it. 
Information  provided  pursuant  to  this 
requirement  would  not,  for  example,  be 
as  extensive  as  that  contained  in  the  sys¬ 
tem  notice  (subsection  (e)  (4) ) . 

It  was  not  the  intent  of  this  subsection 
to  create  a  right  the  nonobservance  of 
which  would  preclude  the  use  of  the 
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information  or  void  an  action  taken  on 
the  basis  of  that  information.  For  exam¬ 
ple,  a  failure  to  comply  with  this  section, 
in  collecting  crop  yield  data  from  a 
farmer,  was  not  intended  to  vitiate  a 
crop  import  quota  based,  in  part,  upon 
such  information.  However,  such  an 
individual  may  have  grounds  for  civil 
action  under  subsection  (g)  (1)  (D)  if  he 
can  show  harm  as  a  result  of  that 
determination. 

Subsection  (e)  (3)  (A)  “The  authority 
(whether  granted  by  statute,  or  by  exec¬ 
utive  order  of  the  President)  which 
authorizes  the  solicitation  of  the  infor¬ 
mation  and  whether  disclosure  of  such 
information  is  mandatory  or  voluntary;” 

The  agency  should  cite  the  specific 
provision  in  statute  or  Executive  order 
which  authorizes  the  agency  to  collect 
the  requested  information  (see  subsection 
(e)(1)  above),  the  brief  title  or  subject 
of  that  statute  or  order,  and  whether  or 
not  the  collecting  agency  is  required  to 
impose  penalties  for  failing  to  respond  or 
is  authorized  to  impose  penalties.  Where 
the  system  is  maintained  pursuant  to 
some  more  general  requirement  or 
authority,  it  should  be  cited.  The  ques¬ 
tion  of  whether  compliance  is  manda¬ 
tory  or  voluntary  is  different  from  the 
question  of  whether  there  are  any  con¬ 
sequences  of  not  providing  information; 
i.e.,  the  law  may  not  require  individuals 
to  apply  for  a  benefit  but  clearly,  for 
some  types  of  voluntary  programs,  to 
apply  without  supplying  certain  minimal 
Information  might  preclude  an  agency 
from  making  an  informed  judgment  and 
thereby  prevent  an  individual  from 
obtaining  a  benefit.  (See  subsection 
(e)  (3)  (D)  regarding  the  requirements  to 
inform  individuals  of  the  effects,  if  any, 
of  not  providing  information.) 

In  some  instances  it  may  be  necessary 
to  include  required  and  optional  infor¬ 
mation  on  the  same  data  collection  form. 
This  should  be  avoided  to  the  extent 
possible  since  the  likely  effect  on  some 
respondents  may  be  coercive;  i.e.,  they 
may  fear  that,  even  though  portions 
of  an  information  request  are  voluntary, 
by  failing  to  respond,  they  may  be  per¬ 
ceived  to  be  uncooperative  and  their 
opportunities  would  thereby  be  preju¬ 
diced.  (See  44  U.S.C.  3511,  the  Federal 
Reports  Act.) 

Subsection  (e)  (3)  (B)  “The  principal 
purpose  or  purposes  for  which  the  infor¬ 
mation  is  Intended  to  be  used ;  ” 

The  individual  should  be  informed  of 
the  principal  purpose(s)  for  which  the 
Information  will  be  used;  e.g.,  to  evalu¬ 
ate  suitability,  to  issue  benefit  payments. 
The  description  of  purpose  (s)  must  in¬ 
clude  all  major  purposes  for  which  the 
record  will  be  used  by  the  agency  which 
maintains  it  and  particularly  those  likely 
to  entail  determinations  as  to  the  indi¬ 
vidual’s  rights,  benefits,  etc.  As  in  all 
other  portions  of  the  information  col¬ 
lection  process,  purposes  should  be  stated 
with  sufficient  specificity  to  communi¬ 
cate  to  an  individual  without  being  so 
lengthy  as  to  discourage  reading  of  the 
notice.  Generally,  the  purposes  will  be 
directly  related  to,  and  necessary  for, 
the  purpose  authorized  by  the  statute  or 
executive  order  cited  above. 
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Subsection  (e)  (3)  (C)  “The  routine 
uses  which  may  be  made  of  the  informa¬ 
tion,  as  published  pursuant  to  paragraph 
(4)  (D)  of  this  subsection;  and” 

“Uses”  can  be  distinguished  from 
“purposes”  in  that  “purposes”  describe 
the  objectives  for  collecting  or  maintain¬ 
ing  information,  whereas  “uses”  are  the 
specific  ways  or  processes  in  which  the 
information  is  employed  including  the 
persons  or  agencies  to  whom  the  record 
may  be  disclosed.  For  example,  the  pur¬ 
poses  for  collecting  information  may  be 
to  evaluate  an  application  for  a  veterans’ 
benefit  and  issue  checks.  Uses  might  in¬ 
clude  verification  of  certain  information 
with  the  Department  of  Defense  and  re¬ 
lease  of  check-issue  data  to  the  Treasury 
Department,  or  disclosure  to  the  Justice 
Department  that  the  applicant  appar¬ 
ently  intentionally  provided  false  or  mis¬ 
leading  information. 

The  term  “routine  use”  is  defined  in 
subsection  (a)  (7)  to  mean  the  disclosure 
of  a  record  “•  *  *  for  a  purpose  which 
is  compatible  with  the  purpose  for  which 
it  was  collected.”  A  “routine  use”  is  one 
which  is  relatable  and  necessary  to  a 
purpose  described  pursuant  to  subsection 
(e)(3)(B),  and  involves  disclosure  out¬ 
side  the  agency  which  maintains  the 
record.  “Routine  uses”  must  be  included 
not  only  in  the  public  notice  about  the 
system  of  records  published  in  accord¬ 
ance  with  subsection  (e)  (4) ,  below,  but 
also  established  in  advance  by  notice  in 
the  Federal  Register  to  permit  public 
comment.  See  subsection  (e)  (11),  below. 

The  description  of  “routine  uses”  pro¬ 
vided  to  the  individual  at  the  time  in¬ 
formation  is  collected  will  frequently  be 
a  summary  of  the  material  published  in 
the  public  notice  pursuant  to  subsection 
(e)  (4)  (D) .  As  with  other  portions  of  the 
notification  to  the  individual,  care 
should  be  exercised  to  tailor  the  length 
and  tone  of  the  notice  to  the  circum¬ 
stances;  i.e.,  the  public  notice  published 
pursuant  to  subsection  (e)  (4)  can  be 
much  more  detailed  than  the  notice  to 
the  individual  appended  to  an  informa¬ 
tion  collection  form. 

Subsection  (e)  (3)  (D)  “The  effects  on 
him,  if  any,  of  not  providing  all  or  any 
part  of  the  requested  information”; 

The  intent  of  this  subsection  is  to  allow 
an  individual  from  whom  personal  in¬ 
formation  is  requested  to  know  the  effects 
(beneficial  and  adverse),  if  any,  of  not 
providing  any  part  or  all  of  the  requested 
information  so  that  he  or  she  can  make 
an  informed  decision  as  to  whether  to 
provide  the  information  requested  on  an 
information  collection  form  or  in  an 
interview. 

The  individual  should  be  informed  of 
the  effects,  if  any,  of  not  responding. 
This  should  be  stated  in  a  manner  which 
relates  to  the  purposes  for  which  the  in¬ 
formation  is  collected;  e.g.,  the  informa¬ 
tion  is  needed  to  evaluate  disabled  vet¬ 
erans  for  special  counseling  and  training 
and  if  it  is  not  provided,  no  additional 
training  will  be  considered  but  disability 
annuities  payments  will  continue.  Par¬ 
ticular  care  must  be  exercised  in  the 
drafting  of  the  wording  of  the  notice  to 
assure  that  the  respondent  to  the  infor¬ 
mation  request  is  not  misled  or  inadver¬ 
tently  coerced. 


Publication  of  the  Annual  Notice  of 
Systems  of  Records.  Subsection  (e)  (4) 
“Subject  to  the  provisions  of  paragraph 
(11)  of  this  subsection,  publish  in  the 
Federal  Register  at  least  annually  a  no¬ 
tice  of  the  existence  and  character  of  the 
system  of  records,  which  notice  shall 
include — ” 

The  public  notice  provision  is  central 
to  the  achievement  of  one  of  the  basic 
objectives  of  the  Act;  fostering  agency 
accountability  through  a  system  of  public 
scrutiny.  The  public  notice  provision  is 
premised  on  the  concept  that  there 
should  be  no  system  of  records  whose  very 
existence  is  secret. 

The  purposes  of  the  notice  are  to  in¬ 
form  the  public  of  the  existence  of  sys¬ 
tems  of  records; 

The  kinds  of  information  maintained; 

The  kinds  of  individuals  on  whom  in¬ 
formation  is  maintained; 

The  purposes  for  which  they  are  used; 
and 

How  individuals  can  exercise  their 
rights  under  the  Act. 

All  systems  of  records  maintained  by 
an  agency  are  subject  to  the  annual  pub¬ 
lic  notice  requirement.  (The  general  and 
special  exemption  sections  permit  agen¬ 
cies  to  omit  portions  of  the  notice  for 
certain  systems.  They  do  not  exempt  any 
agency  from  publishing  a  public  notice 
on  any  system  of  records) . 

Care  must  be  exercised  to  assure  that 
the  tone,  language,  level  of  detail  and 
length  of  the  public  notice  are  considered 
to  assure  that  the  notice  achieves  the 
objective  of  informing  the  public  of  the 
nature  and  purposes  of  agency  systems 
of  records. 

Defining  what  constitutes  a  “system” 
for  purposes  of  preparing  a  notice  will  be 
left  to  agency  discretion  within  the  gen¬ 
eral  guidelines  contained  herein.  (See 
also  subsection  (a)  (5) ) .  A  system  can  be 
a  small  group  of  records  or,  conceivably, 
the  entire  complex  of  records  used  by  an 
agency  for  a  particular  program.  Several 
factors  bear  on  the  determination  by  the 
agency  as  to  what  will  constitute  a  sys¬ 
tem: 

If  each  small  grouping  of  records  is 
treated  as  a  separate  system,  then  pub¬ 
lic  notices  and  procedures  will  be  re¬ 
quired  for  each.  The  publication  of 
numerous  notices  may  have  the  effect 
of  limiting  the  information  value  to  the 
public. 

If  a  large  complex  of  records  is 
treated  as  a  single  system,  only  one  no¬ 
tice  will  be  required  but  that  notice  and 
the  procedures  may  be  considerably 
more  complex. 

Agencies  can  expect  to  be  required  to 
respond  to  Individual  requests  for  ac¬ 
cess  to  records  pertaining  to  them  at  the 
level  of  detail  in  their  public  notices, 
i.e.,  if  an  agency  treats  its  records  for  a 
particular  program  as  a  single  system, 
it  may  be  called  upon  by  an  individual 
to  be  given  access  to  all  Information  in 
records  pertaining  to  that  individual  in 
the  system. 

The  purpose(s)  of  a  system  is  the  most 
important  criterion  in  determining 
whether  a  system  is  to  be  treated  as  a 
single  system  or  several  systems  for  the 
purposes  of  the  Act.  If  Mch  of  several 
groupings  of  agency  records  is  used  for  a 
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unique  purpose  or  set  of  purposes,  as 
delineated  in  subsection  (e)(3)(B) 
above,  each  may  appropriately  be 
treated  as  a  separate  system.  Agencies 
should  keep  in  mind  that  a  major  pur¬ 
pose  of  the  Act  is  not  the  restructuring 
of  existing  systems  of  records,  but 
rather  the  publicizing  of  what  those  sys¬ 
tems  are  and  how  they  are  used.  It  does 
not,  of  course,  preclude  such  restructur¬ 
ing  where  otherwise  necessary  or  appro¬ 
priate  such  as  to  reduce  the  risk  of 
improper  access. 

Geographic  decentralization  will  not 
in  and  of  itself  be  considered  a  criterion 
for  viewing  a  system  of  records  as  sev¬ 
eral  systems.  An  agency  may  treat  a 
decentralized  system  as  a  single  system 
and  specify  several  locations  and  an 
agency  official  responsible  for  the  sys¬ 
tem  at  each  location.  See  subsections 
(e)  (4)  (A)  and  (F) .  While  the  develop¬ 
ment  of  central  indexes  for  systems 
which  do  not  presently  require  such  in¬ 
dexes  should  be  avoided  wherever  possi¬ 
ble,  Individuals  who  seek  to  learn 
whether  a  geographically  decentralized 
system  of  records  contains  a  record  per¬ 
taining  to  them  (subsection  (f)(1)) 
should  not  be  required  to  query  each 
location.  (In  deciding  whether  or  not  to 
construct  an  index,  agencies  must  weigh 
the  potential  threat  of  misuse  posed  by 
making  individual  records  more  accessi¬ 
ble  against  the  capability  to  meet  the 
needs  of  those  individuals  for  access  to 
their  records) .  It  may,  however,  be  possi¬ 
ble  to  guide  individuals  as  to  which  lo¬ 
cation  may  have  a  record  pertaining  to 
.them;  e.g.,  systems  segmented  by  loca¬ 
tion  of  birth,  or  by  range  of  identifica¬ 
tion  number.  In  any  case,  “if  a  system 
is  located  in  more  than  one  place,  each 
location  must  be  listed.”  (House  Report 
93-1416,  p.  15)  See  subsection  (e)  (4)  (A) . 

A  major  criterion  in  determining 
whether  a  grouping  of  records  consti¬ 
tutes  one  system  or  several,  for  pur¬ 
poses  of  the  Act,  will  be  the  ability  to 
be  responsive  to  the  requests  of  the  in¬ 
dividual  for  access  to  records  and  gen¬ 
erally  to  be  informed. 

Systems,  however,  should  not  be  sub¬ 
divided  or  reorganized  so  that  informa¬ 
tion  which  would  otherwise  have  been 
subject  to  the  act  is  no  longer  subject  to 
the  act.  For  example,  if  an  agency  main¬ 
tains  a  series  of  records  not  arranged  by 
name  or  personal  identifier  but  uses  a 
separate  index  file  to  retrieve  records 
by  name  or  personal  identifier  it  should 
not  treat  these  files  as  separate  systems. 

A  public  notice  is  required  to  be 
published: 

For  each  system  in  operation  on  Sep¬ 
tember  27,  1975  on  or  prior  to  that  date 
and  the  notice  shall  be  republished,  in¬ 
cluding  any  revisions,  on  or  before  Au¬ 
gust  30,  each  year  thereafter. 

For  new  systems,  before  the  system 
of  records  becomes  operational;  i.e.,  be¬ 
fore  any  information  about  individuals 
is  collected. 

It  should  be  noted  that  each  “routine 
use”  of  a  system  must  have  been  estab¬ 
lished  in  a  notice  published  for  public 
comment  at  least  30  days  prior  to  the 
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disclosure  of  a  record  for  that  “routine 
use"  as  specified  in  subsection  (e)  (11) . 

For  major  changes  to  existing  systems, 
a  revised  public  notice  is  required  before 
that  change  is  effective.  If  the  change 
to  an  existing  system  involves  changes 
to  “routine  uses”,  they  are  subject  to  the 
30  day  advance  notice  provisions  of  sub¬ 
section  (e)  (11).  The  nature  of  the 
changes  in  a  system  which  would  require 
the  issuance  of  a  revised  public  notice 
before  the  next  annual  public  notice  is 
described  for  each  element  of  the  public 
notice  in  the  succeeding  paragraphs. 
Generally,  any  change  in  a  system  which 
has  the  effect  of  expanding  the  cate¬ 
gories  of  records  maintained,  the  cate¬ 
gories  of  individuals  on  whom  records 
are  maintained,  or  the  potential  recipi¬ 
ents  of  the  information,  will  require  the 
publication  of  a  revised  public  notice 
before  the  change  is  put  into  effect.  In 
addition,  any  modification  that  alters 
the  procedures  by  which  individuals  ex¬ 
ercise  their  rights  under  the  Act  (e.g., 
for  gaining  access)  will  require  the  pub¬ 
lication  of  a  revised  notice  before  that 
change  becomes  effective. 

Changes  of  the  type  described  above 
will  typically  also  require  the  preparation 
of  a  “Report  on  New  Systems”  under 
subsection  (o) ,  below.  Any  other  change 
will  be  incorporated  into  the  next  annual 
revision  of  the  notice. 

The  General  Services  Administration 
(Office  of  the  Federal  Register)  will  issue 
more  detailed  guidance  on  the  formats 
to  be  used  by  agencies  in  publishing  their 
public  notices.  The  formats  prescribed 
by  GSA  are  to  be  used  to  facilitate  the 
annual  compilation  of  the  notices  and  to 
assure  that  notices  are  produced  in  a 
consistent  manner  to  make  them  more 
useful  to  the  public. 

Describing  the  Name  and  Location  of 
the  System  in  the  Public  Notice.  Subsec¬ 
tion  (e)  (4)  (A)  “The  name  and  location 
of  the  system” 

Agencies  will  specify  each  city/town 
and  site  at  which  the  system  of  records 
is  located.  For  a  geographically  dispersed 
system  each  location  should  be  listed.  A 
change  in  the  list  of  locations  will  not 
require  publication  of  a  revised  notice. 

While  the  House  report  language  cited 
above  clearly  indicated  that  the  location 
of  each  site  at  which  the  system  is  main¬ 
tained  is  to  be  listed,  exceptional  situa¬ 
tions  may  dictate  not  including  the  list¬ 
ing  in  the  body  of  the  notice:  e.g., 
military  personnel  records  which  are 
kept  at  several  hundred  installations  or 
certain  farmer  records  which  are  kept 
at  several  thousand  county  extension 
agent  offices.  To  include  the  list  of  loca¬ 
tions  in  each  applicable  notice  would 
only  serve  to  inflate  the  size  and  thereby 
reduce  the  readability  of  the  notice.  In 
these  instances,  it  may  be  appropriate  to 
publish  a  single  list  of  field  stations,  or 
to  refer  in  the  notice  for  all  systems  at 
those  sites  to  a  list  which  is  generally 
available. 

Describing  Categories  of  Individuals  in 
the  Public  Notice.  Subsection  (e)  (4)  (B) 
“The  categories  of  individuals  on  whom 
records  are  maintained  In  the  system;” 


“The  purpose  of  this  requirement  is 
for  an  individual  to  determine  if  infor¬ 
mation  on  him  might  be  in  [the]  system. 
The  description  of  the  categories  should 
therefore  be  clearly  stated  in  non -tech¬ 
nical  terms  understandable  to  individ¬ 
uals  unfamiliar  with  data  collection 
techniques.”  (House  Report  93-1416,  p. 
15).  For  example,  the  notice  might  in¬ 
dicate  that  the  records  are  maintained 
on  students  who  applied  for  loans  under 
a  student  loan  program,  not  persons  who 
filed  form  X  or  who  are  eligible  under 
section  ABC-000. 

Any  change  which  has  the  effect  of 
adding  new  categories  of  individuals  on 
whom  records  are  maintained  will  re¬ 
quire  publication  of  a  revised  public 
notice.  If,  in  the  absence  of  a  revised 
notice,  an  individual  who  is  the  subject 
of  a  record  in  the  system  would  not 
recognize  that  fact,  a  revision  should  be 
issued  before  that  change  is  put  into 
effect.  A  narrowing  of  the  coverage  of  the 
system  does  not  require  advance  issuance 
of  a  revised  notice. 

Describing  Categories  of  Records  in 
the  Public  Notice.  Subsection  (e)  (4)  (C) 
“The  categories  of  records  maintained 
in  the  system;” 

This  portion  of  the  notice  should 
briefly  describe  the  types  of  information 
contained  in  the  system;  e.g.,  employ¬ 
ment  history  or  earnings  records.  As  with 
the  previous  item,  non-technical  terms 
should  be  used.  The  addition  of  any  new 
categories  of  records  not  within  the  cate¬ 
gories  described  in  the  then  current 
public  notice  will  require  the  issuance  of 
a  revised  public  notice  before  that  change 
is  put  into  effect.  The  addition  of  a  new 
data  element  clearly  within  the  scope  of 
the  categories  in  the  notice  would  not  re¬ 
quire  the  issuance  of  a  revised  notice. 

Describing  Routine  Uses  in  the  Public 
Notice.  Subsection  (e)  (4)  (D)  “Each 
routine  use  of  the  records  contained  in 
the  system,  including  the  categories  of 
users  and  the  purpose  of  such  use;” 

In  describing  the  “routine  uses”  of  the 
system  in  the  public  notice,  the  notice 
should  be  sufficiently  explicit  to  com¬ 
municate  to  a  reader  unfamiliar  with  the 
technical  aspects  of  the  system  or  the 
agency’s  program. 

For  a  more  extensive  discussion  of 
“routine  uses,”  see  subsections  (a)  (7) 
(definitions),  (b)(3)  (conditions  of  dis¬ 
closure),  (e)(3)(C)  (notification  to  the 
individual),  and  (e)(ll)  (notice  of 
routine  uses) . 

Any  new  use  or  significant  change  in 
an  existing  use  of  the  system  which  has 
the  effect  of  expanding  the  availability 
of  the  information  in  the  system  will  re¬ 
quire  publication  of  a  revised  public  no¬ 
tice.  Any  such  change  in  a  routine  use 
must  also  be  described  in  a  notice  in  the 
Federal  Register  to  permit  public  com¬ 
ment  before  it  is  implemented. 

Describing  Records  Management  Poli¬ 
cies  and  Practices  in  the  Public  Notice. 
Subsection  (e)  (4)  (E)  “The  policies  and 
practices  of  the  agency  regarding  stor¬ 
age.  retrievability,  access  controls,  re¬ 
tention,  and  disposal  of  the  records”; 
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This  portion  of  the  public  notice  should 
describe  how  the  records  are  maintained, 
how  they  are  safeguarded,  what  cate¬ 
gories  of  officials  within  the  agency  are 
permitted  to  have  access,  and  how  long 
records  are  retained  both  on  the  agency’s 
premises  and  at  secondary  storage  sites. 

In  describing  record  “storage”,  the 
agency  should  indicate  the  medium  in 
which  the  records  are  maintained  (e.g., 
file  folders,  magnetic  tape) .  “Retrieva- 
bility”  covers  the  capabilities  in  the  sys¬ 
tem  of  records  to  index  and  access  a 
record  (e.g.,  by  name,  combinations  of 
personal  characteristics,  identification 
numbers) .  “Access  controls”  describes,  in 
general  terms,  what  measures  have  been 
taken  to  prevent  unauthorized  disclosure 
of  records  (e.g.,  physical  security,  per¬ 
sonnel  screening)  and  what  categories  of 
individuals  within  the  agency  have  ac¬ 
cess.  “Retention”  and  “disposal”  coyer 
the  rules  on  how  long  records  are  main¬ 
tained,  if  and  when  they  are  moved  to  a 
Federal  Records  Center  or  to  the  Ar¬ 
chives,  if  and  how  they  are  destroyed. 
The  description  shall  not  describe  se¬ 
curity  safeguards  in  such  detail  as  to 
increase  the  risk  of  unauthorized  access 
to  the  records. 

Changes  in  this  item  will  not  normally 
require  immediate  publication  of  a  re¬ 
vised  public  notice  unless  they  reflect  an 
expansion  in  the  availability  of  or  access 
to  the  system  of  records. 

Identifying  Offi.cia.Us)  Responsible  for 
the  System  in  the  Public  Notice.  Subsec¬ 
tion  (e)  (4)  (F)  “The  title  and  business 
address  of  the  agency  official  who  is  re¬ 
sponsible  for  the  system  of  records”; 

This  portion  of  the  notice  must  include 
the  title  and  address  of  the  agency  official 
who  is  responsible  for  the  policies  and 
practices  governing  the  system  described 
in  (e)  (4)  (E) ,  above.  For  geographically 
dispersed  systems,  where  individuals  must 
deal  directly  with  agency  officials  at  each 
location  in  order  to  exercise  their  rights 
under  the  Act  (e.g.,  to  gain  access),  the 
title  and  address  of  the  responsible  offi¬ 
cial  at  each  location  should  be  listed  in 
addition  to  the  agency  official  responsible 
for  the  entire  system.  See  discussion  of 
subsection  (e)(4)(A),  above,  for  special 
treatment  of  certain  multiple  location 
systems. 

A  revised  public  notice  shall  be  issued 
before  the  implementation  of  any  change 
in  the  address  to  which  individuals  may 
present  themselves  in  person  to  inquire 
whether  they  are  the  subject  of  a  record 
in  the  system  or  to  seek  access  to  a  record 
or  in  the  address  to  which  individuals 
may  mail  inquiries,  unless  the  agency  has 
established  internal  procedures  to  assure 
that  mail  will  be  forwarded  promptly  so 
that  the  agency  will  be  able  to  respond 
to  inquiries  within  the  time  constraints 
established  in  subsection  (d).  Generally, 
changes  of  this  type  in  the  interim  be¬ 
tween  the  annual  publications  of  the 
compilation  of  notices  should  be  avoided 
if  at  all  possible.  Individuals  are  more 
likely  to  rely  upon  the  annual  compila¬ 
tion  and  are  not  as  likely  to  be  aware  of 
modifications  publicized  only  by  means 
of  separate  notice  in  the  Federal  Reg¬ 
ister. 


Describing  Procedures  for  Determin¬ 
ing  if  a  System  Contains  a  Record  on  an 
Individual  in  the  Public  Notice.  Subsec¬ 
tion  (e)  (4)  (G)  “The  agency  procedures 
whereby  an  individual  can  be  notified  at 
his  request  if  the  system  of  records  con¬ 
tains  a  record  pertaining  to  him;” 

This  portion  of  the  notice  should  spec¬ 
ify  as  a  minimum,  the  following : 

The  address  of  the  agency  office  to 
which  inquiries  should  be  addressed  or 
addresses  of  the  location (s)  at  which  the 
individual  may  present  a  request  in  per¬ 
son.  Wherever  practicable,  this  list 
should  be  the  same  as  the  list  of  officials 
responsible  for  the  system  in  subsection 
(e)  (4)  (F) ,  above.  If  this  is  the  case,  it 
need  not  be  reported. 

What  identifying  information  is  re¬ 
quired  to  ascertain  whether  or  not  the 
system  contains  a  record  about  the 
inquirer. 

The  agency  may  require  proof  of  iden¬ 
tity  only  where  it  has  made  a  determina¬ 
tion  that  knowledge  of  the  fact  that  a 
record  about  an  individual  exists  would 
not  be  required  to  be  disclosed  to  a  mem¬ 
ber  of  the  public  under  section  552  of 
title  5  of  the  United  States  Code  (the 
Freedom  of  Information  Act) .  For  exam¬ 
ple,  an  agency  may  determine  that  dis¬ 
closure  of  a  record  in  a  file  pertaining  to 
conflicts  of  interests  would  be  a  clearly 
unwarranted  invasion  of  personal  pri¬ 
vacy,  within  the  meaning  of  5  U.S.C.  552 
(b)  (6),  and  in  this  instance  the  agency 
may  require  proof  of  identity. 

A  revised  public  notice  will  be  issued 
before  effecting  any  change  which  meets 
the  criteria  outlined  in  subsection  (e) 

(4)  (F),  above. 

This  portion  of  the  notice  must  be  con¬ 
sistent  with  agency  rules  promulgated 
pursuant  to  subsection  (f)(1).  Any 
change  in  these  procedures  is  subject  to 
the  requirements  of  the  Administrative 
Procedure  Act  as  specified  in  subsec¬ 
tion  (f). 

Describing  Procedures  for  Gaining  Ac¬ 
cess  in  the  Public  Notice.  Subsection  (e) 
(4)  (H)  “The  agency  procedures  whereby 
an  individual  can  be  notified  at  his  re¬ 
quest  how  he  can  gain  access  to  any  rec¬ 
ord  pertaining  to  him  contained  in  the 
system  of  records,  and  how  he  can  con¬ 
test  its  content;  and” 

This  portion  of  the  public  notice  must 
include  the  mailing  address  (es)  and,  if 
possible,  the  telephone  number  (s)  of  of¬ 
ficial  (s)  who  can  provide  assistance;  and 
the  location  of  offices  to  which  the  indi¬ 
vidual  may  go  to  seek  information. 

This  provision  does  not  specifically  re¬ 
quire  that  the  actual  procedures  for  ob¬ 
taining  access  or  for  contesting  the  ac¬ 
curacy  of  a  record  be  included  in  the 
public  notice.  It  only  requires  that  in¬ 
dividuals  be  advised  of  the  means  by 
which  they  can  obtain  information  on 
those  procedures.  However,  it  should  be 
noted  that,  pursuant  to  subsection  (f), 
agencies  are  required  to  publish  rules 
which  stipulate  the  procedures  whereby 
the  individual  can  exercise  each  of  these 
rights  and  that  these  rules  are  required 
to  be  incorporated  into  the  annual  com¬ 
pilation  of  notices  and  rules  published 
by  the  Office  of  the  Federal  Register. 


A  revised  public  notice  shall  be  issued 
before  effecting  any  change  about  which 
the  Individual  would  have  to  know  in 
order  to  exercise  his  or  her  rights  under 
the  Act.  Changes  of  this  type  in  the 
interim  between  the  annual  publications 
of  the  compilation  of  notices  should  be 
avoided  if  at  all  possible. 

This  portion  of  the  notice  must  be 
consistent  with  agency  rules  promulgated 
pursuant  to  subsections  (f)  (2)  and  (3). 
Any  change  in  these  procedures  is  subject 
to  the  requirements  of  the  Administra¬ 
tive  Procedure  Act  as  specified  in  sub¬ 
section  (f). 

Describing  Categories  of  Information 
Sources  in  the  Public  Notice.  Subsection 
(e)  (4)  (I)  “The  categories  of  sources  of 
records  in  the  system;” 

For  systems  of  records  which  contain 
information  obtained  from  sources  other 
than  the  individual  to  whom  the  records 
pertain,  the  notice  should  list  the  types 
of  sources  used;  e.g.. 

Previous  employers, 

Financial  institutions, 

Educational  institutions  attended,  or 

Peer  reviewers  (such  as  in  connection 
with  records  of  the  review  of  proposals 
for  research  projects) 

The  notice  should  indicate  if  the  in¬ 
dividual  to  whom  the  records  pertain  is  a 
source  of  the  information  in  the  record. 
Otherwise  all  the  notices  will  appear  to 
be  violating  the  reqiurement  that  in¬ 
dividuals  be  the  main  source  of  informa¬ 
tion  pertaining  to  them. 

Specific  individuals  or  institutions 
need  not  be  identified.  Guidance  on  when 
the  identity  of  a  source  may  be  withheld 
is  contained  in  subsection  (k)  (2),  (5) 
and  (7). 

Standards  of  Accuracy.  Subsection  (e) 

(5)  “Maintain  all  records  which  are  used 
by  the  agency  in  making  any  determina¬ 
tion  about  any  individual  with  such  ac¬ 
curacy,  relevance,  timeliness,  and  com¬ 
pleteness  as  is  reasonably  necessary  to 
assure  fairness  to  the  individual  in  the 
determination;” 

The  objective  of  this  provision  is  to 
minimize,  if  not  eliminate,  the  risk  that 
an  agency  will  make  an  adverse  deter¬ 
mination  about  an  individual  on  the  basis 
of  inaccurate,  incomplete,  irrelevant,  or 
out-of-date  records  that  it  maintains. 
Since  the  final  determination  as  to  ac¬ 
curacy  is  necessarily  judgmental,  it  is 
particularly  critical  that  this  judgment 
be  made  with  an  understanding  of  the 
intent  of  the  Act. 

The  Act  recognizes  the  difficulty  of  es¬ 
tablishing  absolute  standards  of  data 
quality  by  conditioning  the  requirement 
with  the  language  “as  is  reasonably  nec¬ 
essary  to  assure  fairness  to  the  individ¬ 
ual  •  *  *.”  This  places  the  emphasis  on 
assuring  the  quality  of  the  record  in 
terms  of  the  use  of  the  record  in  making 
decisions  affecting  the  rights,  benefits, 
entitlements,  or  opportunities  (including 
employment)  of  the  individual. 

A  corollary  provision  (subsection  (e) 

(6) ,  below)  requires  that  agencies  apply 
the  same  standard  to  records  which  are 
disclosed,  except  when  they  are  disclosed 
to  a  member  of  the  public  under  the 
Freedom  of  Information  Act  or  to  an¬ 
other  agency.  (An  agency  would  be  sub- 
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ject  to  the  Act  and,  therefore,  would  have 
to  apply  Its  own  standards  of  accuracy, 

etc.) 

Agencies  may  develop  tolerances  for 
“accuracy”  and  “timeliness”  giving  con¬ 
sideration  to  the  likelihood  that  errors 
within  those  tolerances  could  result  in  an 
erroneous  decision  with  adverse  conse¬ 
quences  to  the  individual  (e.g.,  denial  of 
rights,  benefits,  entitlements,  or  employ¬ 
ment).  For  example,  for  its  purposes  in 
determining  entitlements  based  on  in¬ 
come,  it  may  only  be  necessary  for  an 
agency  to  record  the  fact  that  income  was 
greater  than  or  less  than  a  stipulated 
level  rather  than  to  ascertain  and  record 
the  precise  amount.  In  questionable  in¬ 
stances,  reverification  of  pertinent  infor¬ 
mation  with  the  individual  to  whom  it 
pertains  may  be  appropriate. 

Useful  criteria  for  assuring  “relevance” 
and  “completeness”  may  be  somewhat 
more  difficult  to  develop.  The  pursuit  of 
“completeness”  could  result  in  the  col¬ 
lection  of  irrelevant  information  which, 
if  taken  into  account  in  making  an 
agency  determination  could  prejudice 
the  decision.  Agencies  must  limit  their 
records  to  those  elements  of  information 
which  clearly  bear  on  the  determina¬ 
tion  (s)  for  which  the  records  are  in¬ 
tended  to  be  used,  and  assure  that  all  ele¬ 
ments  necessary  to  the  determinations 
are  present  before  the  determination  is 
made. 

Validating  Records  Before  Disclo¬ 
sure.  Subsection  (e)  (6)  “Prior  to  dis¬ 
seminating  any  record  about  an  indi¬ 
vidual  to  any  person  other  than  an 
agency,  unless  the  dissemination  is 
made  pursuant  to  subsection  (b)  (2)  of 
this  section,  make  reasonable  efforts  to 
assure  that  such  records  are  accurate, 
complete,  timely,  and  _  relevant  for 
agency  purposes;” 

While  the  Act  recognizes  that  an 
agency  cannot  guarantee  the  absolute 
accuracy  of  its  systems  of  records,  any 
record  disclosed  to  a  person  outside  the 
agency  (except  another  agency)  must 
be  as  accurate  as  appropriate  for  pur¬ 
poses  of  tiie  agency  which  maintained 
the  record.  (See  subsection  (e)  (5) ).  The 
only  exceptions  to  this  requirement  are 
for  disclosures  to  another  agency  or  to 
the  public  under  the  Freedom  of  Infor¬ 
mation  Act  which  may  not  be  delayed 
or  impeded. 

Recognizing  that  an  agency  properly 
disclosing  information  (pursuant  to  sub¬ 
section  (b),  conditions  of  disclosure)  is 
often  not  in  a  position  to  evaluate  accept¬ 
able  tolerances  of  error  for  the  purposes 
of  the  recipient  of  the  information,  the 
primary  objective  of  this  provision  is, 
nonetheless,  to  assure  that  reasonable 
efforts  are  made  to  assure  the  quality 
of  records  disclosed  to  persons  who  are 
not  subject  to  the  provisions  of  sub¬ 
section  (e)  (5) .  The  agency  must,  there¬ 
fore,  make  reasonable  efforts  to  assure 
that  a  record  it  discloses  is  as  accurate, 
relevant,  timely,  and  complete  as  would 
be  reasonably  necessary  to  assure  fair¬ 
ness  in  any  determination  that  it  might 
make  on  the  basis  of  that  record.  It 
may,  for  example,  be  appropriate  to  ad¬ 
vise  recipients  that  the  Information  dis¬ 


closed  was  accurate  as  of  a  specific 
date,  such  as  the  last  date  on  which 
a  determination  was  made  by  the  agen¬ 
cy  on  the  basis  of  the  record  or  of 
other  known  limits  on  its  accuracy  e.g., 
its  source. 

Records  on  Religious  or  Political  Ac¬ 
tivities.  Subsection  (e)(7)  “Maintain 
no  record  describing  how  any  individ¬ 
ual  exercises  rights  guaranteed  by  the 
First  Amendment  unless  expressly  au¬ 
thorized  by  statute  or  by  the  individual 
about  whom  the  record  is  maintained 
or  unless  pertinent  to  and  within  the 
scope  of  an  authorized  law  enforcement 
activity;” 

Whereas  subsection  (e)(1)  generally 
enjoins  agencies  from  collecting  infor¬ 
mation  not  “relevant  and  necessary  to 
accomplish  a  purpose  of  the  agency,” 
this  provisions  establishes  an  even  more 
rigorous  standard  governing  thfe  main¬ 
tenance  of  records  regarding  the  exer¬ 
cise  of  First  Amendment  rights.  These 
include,  but  are  not  limited  to  religious 
and  political  beliefs,  freedom  of  speech 
and  of  the  press,  and  freedom  of  assem¬ 
bly  and  petition. 

In  determining  whether  or  not  a  par¬ 
ticular  activity  constitutes  the  exer¬ 
cise  of  a  right”  guaranteed  by  the  First 
Amendment”,  agencies  will  apply  the 
broadest  reasonable  interpretation. 

Records  describing  the  exercise  of 
these  rights  may  be  maintained  only  if 
one  of  the  following  conditions  is  met: 

A  statute  specifically  authorizes  it. 
Specific  authorization  means  that  a 
statute  explicitly  provides  that  an  agency 
may  maintain  records  on  activities  whose 
exercise  is  covered  by  the  First  Amend¬ 
ment;  not  merely  that  the  agency  is  au¬ 
thorized  to  establish  a  system  of  records. 
However,  the  statute  need  not  address  it¬ 
self  specifically  to  the  maintenance  of 
records  of  First  Amendment  activities  if 
it  specifies  that  6uch  activities  are  rele¬ 
vant  to  a  determination  concerning  the 
individual.  For  example,  since  the  Im¬ 
migration  and  Nationality  Act  makes  the 
possibility  of  religious  or  political  perse¬ 
cution  relevant  to  a  stay  of  deportation, 
the  information  on  these  subjects  may  be 
admitted  in  evidence,  and  therefore 
would  not  be  prohibited  by  this  provision. 

The  individual  expressly  authorizes  it; 
e.g.,  a  member  of  the  armed  forces  may 
indicate  a  religious  preference  so  that,  if 
seriously  injured  or  killed  while  on  duty, 
the  proper  clergyman  can  be  called.  The 
individual  may  also  volunteer  such  in¬ 
formation  and  if  he  does  so,  the  agency 
is  not  precluded  from  accepting  and  re¬ 
taining  it.  Thus,  if  an  applicant  for  poli¬ 
tical  appointment  should  list  his  political 
affiliation,  association  memberships,  and 
religious  activities,  the  agency  may  re¬ 
tain  this  as  part  of  his  application  file  or 
include  it  in  an  official  biography.  Sim¬ 
ilarly,  if  an  individual  volunteers  in¬ 
formation  on  civic  or  religious  activities 
in  order  to  enhance  his  chances  of  re¬ 
ceiving  a  benefit,  such  as  executive  clem¬ 
ency,  the  agency  may  consider  informa¬ 
tion  thus  volunteered.  However,  nothing 
in  the  request  for  information  should  in 
any  way  suggest  that  Information  on  an 
individual’s  First  Amendment  activities 
is  required. 


The  record  is  required  by  the  agency 
for  an  authorized  law  enforcement  func¬ 
tion. 

In  the  discussions  on  the  floor  of  the 
House  regarding  the  authority  to  main¬ 
tain  such  records  for  law  enforcement 
purposes,  it  was  stated  that  the  objec¬ 
tive  of  the  law  enforcement  qualification 
on  the  general  prohibition  was  “to  make 
certain  that  political  and  religious  ac¬ 
tivities  are  not  used  as  a  cover  for  illegal 
or  subversive  activities.”  However,  it  was 
agreed  that  “no  file  would  be  kept  of  per¬ 
sons  who  are  merely  exercising  their  con¬ 
stitutional  rights  *  *  *”  and  that  in  ac¬ 
cepting  this  qualification  “there  was  no 
intention  to  interfere  with  First  Amend¬ 
ment  rights”  ( Congressional  Record, 
November  20,  1974,  H10892  and  Novem¬ 
ber  21,  1974,  H10952) 

Notification  for  Disclosures  under  Com¬ 
pulsory  Legal  Process.  Subsection  (e)  (8) 
“Make  reasonable  efforts  to  serve  notice 
on  an  individual  when  any  record  on 
such  individual  is  made  available  to  any 
person  under  compulsory  legal  process 
when  such  process  becomes  a  matter  of 
public  record;” 

When  a  record  is  disclosed  under  com¬ 
pulsory  legal  process  (e.g.,  pursuant  to 
subsection  (b)  (ID),  and  the  issuance  of 
that  order  or  subpoena  is  made  public  by 
the  court  or  agency  which  issued  it, 
agencies  must  make  reasonable  efforts  to 
notify  the  individual  to  whom  the  record 
pertains.  This  may  be  accomplished  by 
notifying  the  individual  by  mail  at  his  or 
her  last  known  address.  The  most  recent 
address  in  the  agency’s  records  will  suf¬ 
fice  for  this  purpose  and  no  separate  ad¬ 
dress  records  are  required.  Upon  being 
served  with  an  order  to  disclose  a  record, 
the  agency  should  endeavor  to  determine 
whether  the  issuance  of  the  order  is  a 
matter  of  public  record  and,  if  it  is  not, 
seek  to  be  advised  when  it  becomes  pub¬ 
lic.  An  accounting  of  the  disclosure,  pur¬ 
suant  to  subsection  (c)(1),  is  also  re¬ 
quired  to  be  made  at  the  time  the  agency 
complies  with  the  order  or  subpoena. 

Rules  of  Conduct  for  Agency  Personnel. 
Subsection  (e)  (9)  “Establish  rules  of 
conduct  for  persons  involved  in  the  de¬ 
sign,  development,  operation,  or  main¬ 
tenance  of  any  system  of  records,  or  in 
maintaining  any  record,  and  instruct 
each  such  person  with  respect  to  such 
rules  and  the  requirements  of  this  sec¬ 
tion,  including  any  other  rules  and  pro¬ 
cedures  adopted  pursuant  to  this  section 
and  the  penalties  for  noncompliance;” 

Effective  compliance  with  the  provi¬ 
sions  of  this  Act  will  require  informed 
and  active  support  of  a  broad  cross  sec¬ 
tion  of  agency  personnel.  It  is  important 
that  fill  personnel  who  in  any  way  have 
access  to  systems  of  records  or  who  are 
engaged  in  the  development  of  pro¬ 
cedures  or  systems  for  handling  records, 
be  informed  of  the  requirements  of  the 
Act  and  be  adequately  trained  in  agency 
procedures  developed  to  implement  the 
Act.  Personnel  with  particular  concerns 
include,  but  are  not  limited  to,  those  en¬ 
gaged  in  personnel  management,  paper¬ 
work  management  (reports,  forms,  rec¬ 
ords,  and  related  functions),  computer 
systems  development  and  operations, 
communications,  statistical  data  collec- 
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tion  and  analysis,  and  program  evalua¬ 
tion.  (The  Communications  Act  of  1934 
prescribes  standards  and  penalties  for 
personnel  engaged  in  handling  interstate 
communications  and  shall  also  be  con¬ 
sulted,  where  applicable,  when  agency 
rules  of  conduct  are  being  developed). 

Activities  under  this  provision  will 
include 

The  incorporation  of  provisions  on 
privacy  into  agency  standards  of 
conduct; 

The  discussion  of  individual  employee 
responsibilities  under  the  Act  in  general 
personnel  orientation  programs;  and 
The  incorporation  of  training  on  the 
specific  procedural  requirements  of  the 
Act  into  both  formal  and  informal  (on- 
the-job)  training  programs. 

Concurrently,  those  agencies  with 
broad  policy  development  and  training 
responsibilities  (eg.,  the  General  Serv¬ 
ices  Administration,  the  Civil  Service 
Commission)  will  also  be  revising  their 
programs  as  appropriate  to  augment 
agency  activities  in  this  area. 

This  provision  is  also  important  in  en¬ 
suring  that  individuals  who  are  poten¬ 
tially  criminally  liable  or  whose  actions 
could  expose  the  agency  to  civil  suit  (un¬ 
der  subsections  (i)  and  (g) ,  respectively) 
are  fully  informed  of  their  obligations 
under  the  Act. 

Administrative,  Technical  and  Physi¬ 
cal  Safeguards.  Subsection  (e)  (10)  “Es¬ 
tablish  appropriate  administrative,  tech¬ 
nical,  and  physical  safeguards  to  insure 
the  security  and  confidentiality  of  rec¬ 
ords  and  to  protect  against  any  antici¬ 
pated  threats  or  hazards  to  their  secur¬ 
ity  or  integrity  which  could  result  in 
substantial  harm,  embarrassment,  in¬ 
convenience,  or  unfairness  to  any  in¬ 
dividual  on  whom  information  is 
maintained;” 

The  development  of  appropriate  ad¬ 
ministrative,  technical,  and  physical 
safeguards  will,  necessarily,  have  to  be 
tailored  to  the  requirements  of  each  sys¬ 
tem  of  records  and  other  related  require¬ 
ments  for  security  and  confidentiality. 
The  need  to  assure  the  integrity  of  and 
to  prevent  unauthorized  access  to,  sys¬ 
tems  of  records  will  be  determined  not 
only  by  the  requirements  of  this  Act  but 
also  by  other  factors  like  the  require¬ 
ment  for  continuity  of  agency  operations, 
the  need  to  protect  proprietary  data,  ap¬ 
plicable  access  restrictions  to  protect  the 
national  security,  and  the  need  for  ac¬ 
curacy  and  reliability  of  agency  infor¬ 
mation. 

While  the  technology  of  system  secu¬ 
rity  (both  for  computer-based  and  other 
systems  of  records)  is  well  developed  as 
it  relates  to  materials  classified  for  rea¬ 
son  of  national  defense  or  foreign  policy, 
few  standards  currently  exist  to  guide 
the  "civil”  agency  in  this  area.  Until 
such  standards  are  developed  and  pro¬ 
mulgated,  agencies  will  be  required  to 
analyze  each  system  as  to  the  risk  of  im¬ 
proper  disclosure  of  records  and  the  cost 
and  availability  of  measures  to  minimize 
those  risks.  The  Department  of  Com¬ 
merce  (National  Bureau  of  Standards) 
will  be  issuing  guidelines  and  standards 
to  assist  agencies  In  evaluating  various 
technological  approaches  to  providing 


security  safeguards  in  their  system  and 
for  assessing  risks. 

Notice  for  New/Revised  Routine  Uses. 
Subsection  (e)(ll)  “At  least  30  days 
prior  to  publication  of  information  un¬ 
der  paragraph  (4)  (D)  of  this  subsection, 
publish  in  the  Federal  Register  notice 
of  any  new  use  or  intended  use  of  the 
information  in  the  system,  and  provide 
an  opportunity  for  interested  persons  to 
submit  written  data,  views,  or  arguments 
to  the  agency.” 

Agencies  are  required  to  publish  in  the 
Federal  Register  a  notice  of  their  inten¬ 
tion  to  establish  “routine  uses”  for  each 
of  their  systems  of  records.  Although 
this  provision  is  designed  to  supplant  the 
informal  rule-making  provisions  of  5 
U.S.C.  553,  the  accommodation  of  the 
public  comments  in  the  judicial  review 
of  the  rule-making  exercise  was  intended 
wherever  practicable.  Agencies  should 
furnish  as  complete  an  explanation  of 
the  routine  uses  and  any  changes  made 
or  not  made  as  a  result  of  the  public 
comment  as  possible  so  that  the  public 
will  be  fully  informed  of  the  proposed 
use.  This  is  to  give  the  public  an  oppor¬ 
tunity  to  comment  on  the  appropriate¬ 
ness  of  those  uses  before  they  come  into 
effect.  This  notice  should  be  published 
sufficiently  in  advance  of  the  proposed 
effective  date  of  the  use  to  permit  time 
for  the  public  to  comment  and  for  the 
agency  to  review  those  comments,  but  in 
no  case  may  a  new  “routine  use”  be  used 
as  the  basis  for  a  disclosure  less  than  30 
days  after  the  publication  of  the  “routine 
use”  notice  in  the  Federal  Register.  A 
revised  public  notice  (subsection  (e)  (4) ) 
must  be  published  before  a  “routine  use” 
is  put  into  effect;  i.e.,  before  a  record  is 
disclosed  for  such  a  use. 

It  is  clearly  permissible  to  publish  the 
entire  system  notice  (prescribed  by  sub¬ 
section  (e)  (4) )  as  the  notice  of  “routine 
use”  provided  that  such  “routine  uses” 
are  not  put  into  effect  until  the  required 
30  day  notice  period.  If  an  entire  system 
notice  is  not  published,  the  notice  of 
“routine  use”  issued  pursuant  to  sub¬ 
section  (e)  (11)  must,  as  a  minimum, 
contain 

The  name  of  the  system  of  records  for 
which  the  “routine  use”  is  to  be  estab¬ 
lished; 

Where  feasible,  the  authority  for  the 
system  (see  discussion  of  subsection  (e) 
(1),  and  the  required  notice  to  the  in¬ 
dividual  in  subsection  (e)(3)(A)), 
above) ; 

The  categories  of  records  maintained; 

The  proposed  “routine  use(s) 

And  the  categories  of  recipients  for 
each  proposed  “routine  use”.- 

For  new  “routine  uses”  of  systems  for 
which  a  public  notice  under  subsection 
(e)  (4)  has  already  been  published,  refer¬ 
ence  should  be  made  to  that  public  no¬ 
tice. 

A  notice  in  the  Federal  Register  invit¬ 
ing  public  comment  on  a  proposed  new 
“routine  use”  is  required. 

For  all  existing  systems  of  records  not 
later  than  August  28,  1975.  (Since  30 
days  advance  notice  of  a  “routine  use”  is 
required,  an  agency  that  fails  to  publish 
necessary  notices  for  existing  systems  on 
or  prior  to  August  28  may  find  that  it  is 


precluded  from  making  necessary  inter¬ 
agency  transfers  until  it  has  complied 
with  this  provision) ; 

For  an  existing  system  of  records, 
whenever  a  new  “routine  use”  is  pro¬ 
posed.  A  new  “routine  use”  is  one  which 
involves  disclosure  of  records  for  a  new 
purpose  compatible  with  the  purpose  for 
which  the  record  is  maintained  or  to  a 
new  recipient  or  category  of  recipients 
(even  if  other  uses  are  concurrently  cur¬ 
tailed)  ;  and 

For  any  new  systems  of  records  for 
which  “routine  uses”  are  contemplated. 

Section  (f)  Agency  Rules 

Subsection  (f)  “In  order  to  carry  out 
the  provisions  of  this  section,  each  agency 
that  maintains  a  system  of  records  shall 
promulgate  rules,  in  accordance  with  the 
requirements  (including  general  notice) 
of  section  553  of  this  title,  which  shall — ” 

Agencies  must  promulgate  rules  to  im¬ 
plement  the  provisions  of  the  Act  in  ac¬ 
cordance  with  the  requirements  of  sec¬ 
tion  553  of  title  5  of  the  United  States 
Code  including  publication  of  the  rules 
in  the  Federal  Register  so  that  inter¬ 
ested  persons  can  have  an  opportunity  to 
comment.  A  “rule”  is  defined  as  “the 
whole  or  a  part  of  an  agency  statement 
of  general  or  particular  applicability  and 
future  effect  designed  to  implement,  in¬ 
terpret,  or  prescribe  law  or  policy  or  de¬ 
scribing  the  organization,  procedures,  or 
practice  requirements  of  agency  *  *  •” 
(5  U.S.C.  551(4)).  Formal  hearings  are 
not  required  with  respect  to  rules  issued 
under  this  section.  However,  formal  hear¬ 
ings  are  not  precluded  by  this  section 
and,  in  particular  instances,  agencies 
may  elect  to  use  the  formal  hearing  pro¬ 
cedure. 

Two  distinct  objectives  must  be  satis¬ 
fied  by  the  rules  promulgated  pursuant 
to  this  subsection : 

They  must  provide  the  public  with 
sufficient  information  to  understand  how 
an  agency  is  complying  with  the  law; 
and 

They  must  provide  sufficient  informa¬ 
tion  for  individuals  to  exercise  their 
rights  under  the  Act. 

Rules  promulgated  under  this  subsec¬ 
tion  differ  from  notices  under  subsec¬ 
tion  (e)  in  several  ways: 

Rules  promulgated  under  this  subsec¬ 
tion  are  subject  to  requirements  of  sec¬ 
tion  553  of  the  Administrative  Proce¬ 
dure  Act  governing  the  publication  of 
proposed  rules  for  public  comment  be¬ 
fore  issuing  them  as  final  rules. 

Rules  must  only  be  published  twice — 
as  notice  of  rule  making  and  when  they 
are  promulgated  as  final  rules-unless 
they  are  subsequently  modified.  (They 
will,  however,  be  included  in  an  annual 
compilation  published  by  GSA.) 

A  separate  set  of  rules  need  not  be 
published  for  each  system  of  records  that 
an  agency  maintains.  The  development 
of  a  single  set  of  agency  rules  is  en¬ 
couraged  wherever  appropriate. 

Agencies  are  required  to  publish  pro¬ 
posed  rules  under  this  subsection  allow¬ 
ing  at  least  30  days  for  public  comment 
prior  to  publishing  them  as  final  rules. 
(For  systems  which  will  be  In  use  on 
September  27,  1975,  agencies  will  have 
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to  publish  rules  not  later  than  August  28, 
1975.)  No  further  republication  of 
agency  rules  is  required  (other  then  their 
inclusion  in  the  annual  compilation  pub¬ 
lished  by  the  office  of  the  Federal  Reg¬ 
ister)  unless  a  change  is  proposed. 

The  language  of  subsection  (f)  ex¬ 
plicitly  requires  “general  notice;”  i.e., 
section  553(b)  of  title  5  which  permits 
agencies  not  to  publish  a  general  notice 
if  “persons  subject  thereto  are  named 
and  either  personally  served  or  otherwise 
have  actual  notice  •  •  shall  not  apply 
to  rules  promulgated  under  this  subsec¬ 
tion.  Agencies  should  also  be  aware  of 
the  fact  that,  although  the  presump¬ 
tion  is  of  the  validity  of  the  proposed 
rule,  judicial  review  under  the  Adminis¬ 
trative  Procedure  Act  will  be  available 
to  assure  against  arbitrary  or  capricious 
actions. 

Rules  for  Determining  if  an  Individ- 
ual  is  the  Subject  of  a  Record.  Subsec¬ 
tion  (f)  (1)  “Establish  procedures  where¬ 
by  an  individual  can  be  notified  in  re¬ 
sponse  to  his  request  if  any  system  of 
records  named  by  the  individual  con¬ 
tains  a  record  pertaining  to  him;” 

The  procedures  for  individuals  to  de¬ 
termine  if  a  system  of  records  contains, 
records  pertaining  to  them  should  be 
kept  as  simple  as  possible.  The  published 
procedures  should  specify — 

To  whom  the  request  should  be  di¬ 
rected.  As  discussed  above  (subsection 
(e)  (4) ) ,  for  geographically  decentralized 
systems,  the  individual  should  not  be 
required  to  query  each  location  unless 
the  individual  can  reasonably  be  ex¬ 
pected  to  be  able  to  discern  which  loca¬ 
tion  would  have  a  record  if  one  existed; 
e.g.,  by  place  of  birth,  place  of  employ¬ 
ment.  While  the  development_of  central 
indexes  to  satisfy  the  requirements  of 
this  provision  is  discouraged,  such  in¬ 
dexes  may  be  necessary  in  some 
instances. 

The  information  necessary  to  iden¬ 
tify  the  record.  Where  the  system  em¬ 
ploys  a  specialized  identification  scheme, 
the  individual  should  not  be  required  to 
prpvide  such  a  number  or  symbol  as  an 
absolute  requirement,  although  the  in¬ 
dividual  might  be  requested  to  supply  it 
if  he  or  she  can  reasonably  be  expected 
to  know  it.  Instead,  alternative  combina¬ 
tions  of  personal  characteristics  may  be 
used  to  identify  individuals  who  may 
have  lost,  forgotten,  or  are  unaware  of 
their  identification  numbers  or  symbols. 
For  example,  the  combination  of  name, 
date  of  birth,  place  of  birth,  and  father’s 
first  name  may  be  sufficient  to  identify 
an  individual  without  the  use  of  a  sys¬ 
tem  identification  number.  As  was  sug¬ 
gested  above,  the  development  of  new 
retrieval  and  indexing  capabilities  is  not 
encouraged,  rather  agencies  should  ex¬ 
ploit  existing  capabilities  to  serve  indi¬ 
vidual  needs.  Restrictions  on  the  use  of 
the  Social  Security  Number  as  an  iden¬ 
tifier  established  by  Section  7  of  this  Act 
should  also  be  noted  where  applicable. 

Any  requirements  for  verification  of 
identity.  These  may  only  be  imposed 
when  the  fact  of  the  existence  of  a 
record  would  not  be  required  to  be  dis¬ 
closed  under  the  Freedom  of  Information 
Act  (5  U.S.C.  552) . 


Agency  procedures  should  provide  for 
acknowledgement  of  the  inquiry  within 
10  days  (excluding  Saturdays,  Sundays, 
and  legal  public  holidays) . 

Rules  for  Handling  Requests  for  Ac¬ 
cess.  Subsection  (f)  (2)  “Define  reason¬ 
able  times,  places,  and  requirements  for 
identifying  an  individual  who  requests 
his  record  or  information  pertaining  to 
him  before  the  agency  shall  make  the 
record  or  information  available  to  the 
individual;” 

The  development  of  procedures  for 
individuals  to  identify  themselves  for  the 
purposes  of  gaining  access  to  their  rec¬ 
ords  will  necessarily  vary  depending  on 
the  nature,  location,  and  sensitivity  of 
the  records  in  the  system.  Care  must  be 
exercised  to  assure  that  the  requirements 
for  verification  of  identity  are  not  so 
cumbersome  as  to  prevent  individuals 
from  gaining  access  to  records  to  which 
they  are  entitled  to  have  access.  The 
requirements  pertaining  to  verification 
of  identity  contained  in  subsection 
(f)  <1),  above,  should  also  be  noted. 

“Reasonableness”  will  be  measured  in 
terms  of 

The  risk  of  access  being  granted  to  an 
individual  who  is  not  entitled  to  access 
weighed  against  the  probable  harm  (in¬ 
cluding  embarrassment)  to  the  individ¬ 
ual  to  whom  the  record  pertains  which 
would  result  from  unauthorized  access; 
and 

The  standards  for  verification  of  iden¬ 
tity  which  a  typical  individual  about 
whom  record  is  maintained  could  be  ex¬ 
pected  to  meet. 

When  agencies  specify  that  individuals 
may  (or  must)  present  themselves  in 
person  to  verify  their  identity,  hours  and 
locations  specified  should  take  into  ac¬ 
count  the  kinds  of  individuals  about 
whom  records  are  maintained.  For  ex¬ 
ample,  it  may  be  appropriate  to  ask  a 
current  employee  who  seeks  access  to  his 
record  to  present  himself  to  the  agency 
personnel  office  during  normal  working 
horn's.  No  requirements  may  be  estab¬ 
lished  which  would  have  the  effect  of  im¬ 
peding  an  individual  in  exercising  his  or 
her  right  to  access. 

Agencies  which  maintain  systems  of 
records  on  widely  dispersed  groups  of  in¬ 
dividuals  and  which  have  field  offices 
equipped  to  do  so,  are  encouraged  to  use 
those  offices  as  sites  at  which  an  individ¬ 
ual  can  present  a  request  for  access  even 
though  his  or  her  records  may  not  be 
maintained  at  any  one  of  those  field 
offices.  The  information  necessary  to 
identify  individuals  should  be  kept  to  the 
absolute  minimum  and  neither  this  pro¬ 
vision  nor  any  other  provision  of  the  Act 
should  be  used  for  the  purpose  of  acquir¬ 
ing  and  storing  additional  information 
about  an  individual. 

The  published  rules  prescribing  pro¬ 
cedures  for  verification  of  identity  will 
include — 

A  list  of  the  locations  and/or  mailing 
addresses  of  locations  to  which  the  re¬ 
quest  may  be  presented; 

When  in-person  verification  is  re¬ 
quired  or  permitted,  the  hours  when 
those  locations  are  open  (Including  the 
dates  of  holidays  on  which  they  are 
closed) ;  and 


Documents  which  the  agency  will  re¬ 
quire,  if  any,  to  establish  the  identity  of 
the  individual  (specifying  as  many  alter¬ 
natives  as  possible) . 

Rules  lor  Granting  Access  to  Records. 
Subsection  (f)  (3)  “Establish  procedures 
for  the  disclosure  to  an  individual  upon 
his  request  of  his  record  or  information 
pertaining  to  him,  including  special  pro¬ 
cedure  [sic],  if  deemed  necessary,  for  the 
disclosure  to  an  individual  of  medical  rec¬ 
ords  including  psychological  records,  per¬ 
taining  to  him; 

Individuals  may  be  granted  access  to 
their  records  either  in  person  or  by  hav¬ 
ing  copies  mailed  to  them.  The  nature  of 
the  system  and  of  the  individuals  on 
whom  records  are  maintained  will  deter¬ 
mine  which  method  is  appropriate.  If  an 
agency  determines  that  it  can  grant  ac¬ 
cess  to  records  only  by  providing  a  copy 
of  the  record  through  the  mail  because  it 
cannot  provide  “reasonable”  means  for 
individuals  to  have  access  to  their  rec¬ 
ords  in  person,  it  may  not  charge  a  fee 
for  making  the  copy. 

The  issue  of  access  to  medical  records 
was  the  subject  of  extensive  discussion 
during  the  development  of  the  Act.  As 
written,  the  Act  provides  that  individ¬ 
uals  have  an  unqualified  right  of  access 
to  records  pertaining  to  them  (with  cer¬ 
tain  exceptions  specified  in  subsections 
(j)  and  (k),  below)  but  that  the  process 
by  which  individuals  are  granted  access 
to  medical  records  may,  at  the  discre¬ 
tion  of  the  agency,  be  modified  to  pre¬ 
vent  harm  to  the  individual.  [See  sub¬ 
section  (d)(1).] 

As  a  minimum,  rules  issued  pursuant 
to  this  subsection  shall  be  consistent  with 
the  requirements  of  subsection  (d)(1) 
and  should  include — 

Some  indication,  for  requests  pre¬ 
sented  in  person,  as  to  whether  the  in¬ 
dividual  can  expect  to  be  granted  Im¬ 
mediate  access  to  the  record  and,  for 
written  request,  the  expected  time  lag, 
if  any,  between  receipt  of  a  request  for 
access  and  the  granting  of  that  access 
(see  subsection  (d)  (2)  for  guidance  on 
maximum  response  times) ;  and 

The  locations  at  which  individuals  will 
be  granted  access  to  their  records  or 
the  fact  that  access  will  be  granted  by 
providing  copies  by  mail; 

Notice  that  an  individual  when  re¬ 
viewing  a  record  in  person,  may  be  ac¬ 
companied  by  another  individual  of  his 
or  her  choosing  and  the  agency’s  re¬ 
quirements,  if  any,  for  a  written  state¬ 
ment  authorizing  that  individual’s  pres¬ 
ence.  Such  authorization  statements,  if 
employed,  should  be  as  brief  as  possible. 

Rules  for  Amending  Records.  Subsec¬ 
tion  (f)  (4)  “Establish  procedures  for 
reviewing  a  request  from  an  individual 
concerning  the  amendment  of  any  record 
or  information  pertaining  to  the  indi¬ 
vidual,  for  making  a  determination  on 
the  request,  for  an  appeal  within  the 
agency  of  an  initial  adverse  agency  de¬ 
termination,  and  for  whatever  additional 
means  may  be  necessary  for  each  indi¬ 
vidual  to  be  able  to  exercise  fully  his 
rights  under  this  section;” 

Agency  procedures  for  permitting  an 
individual  to  request  amendment  of  a 
record  shall  be  consistent  with  subsec - 
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tions  (d)  (2)  and  (3)  and  shall  as  a 
minimum,  specify — 

The  official  (s)  to  whom  the  request 
is  to  be  directed; 

The  identifying  information  required 
to  relate  the  request  to  the  appropriate 
record; 

The  official(s)  to  whom  a  request  for 
a  review  of  an  initial  adverse  determi¬ 
nation  on  request  to  amend  may 
be  taken;  and 

Offices/officials  from  whom  assistance 
can  be  obtained  in  preparing  a  request 
to  amend  a  record  or  to  appeal  an  ini¬ 
tial  adverse  determination  or  to  learn 
further  of  the  provisions  for  judicial 
review. 

If  the  agency  deems  it  appropriate  to 
establish  (or  already  has)  a  formal  re¬ 
viewing  mechanism  for  assessing  the  ac¬ 
curacy  of  its  records  or  for  reconciling 
disputes,  that  mechanism  or  board  should 
be  described  in  its  rules  published  pursu¬ 
ant  to  this  subsection.  This  provision 
does  not  require  the  establishment  of 
new,  separate  review  mechanisms  where 
such  capabilities  exist  and  are,  or  can  be 
modified  to  be,  in  conformance  with  this 
Act. 

Rules  Regarding  Fees.  Subsection  (f) 
(5)  “Establish  fees  to  be  charged,  if  any, 
to  any  individual  for  making  copies  of  his 
record,  excluding  the  cost  of  any  search 
for  and  review  of  the  record.” 

Fees  may  be  charged  to  an  individual 
under  this  section  only  for  the  making  of 
copies  of  records  when  requested  by  the 
individual.  As  stated  $bove  (subsection 
(f )  (3) ) ,  when  copies  are  made  by  the 
agency  incident  to  granting  access  to  a 
record,  a  fee  may  not  be  charged.  (It 
should  be  noted  that  the  provisions  on 
fees  charged  to  an  individual  under  this 
Act  differ  from  those  governing  fees 
charged  to  the  public.  See  5  U.S.C.  552, 
as  amended,  the  Freedom  of  Information 
Act,  for  guidance  on  fees  for  copies  of 
records  made  available  to  the  public.) 

“[An! agency  may  not  charge  the  indi¬ 
vidual  for  time  spent  searching  for  re¬ 
quested  records  or  for  time  spent  in  re¬ 
viewing  records  to  determine  if  they  fall 
within  the  disclosure  requirements  of  the 
Act”  (House  Report  93-1416,  p.  17.) 
When  an  individual  requests  a  copy  of  a 
record,  pursuant  to  subsection  (d)  (1) 
(access  to  records) ,  the  fee  charged  may 
not  exceed  the  direct  cost  of  making  the 
copy  (printing,  typing,  or  photocopying 
and  related  personnel  and  equipment 
costs)  and  may  not  include  any  cost  of 
retrieving  the  information.  In  establish¬ 
ing  fee  schedules,  agencies  should  also 
consider  the  cost  of  collecting  the  fee  in 
determining  when  fees  are  appropriate. 

Annual  Publication  of  Notices  and 
Rules.  Subsection  (f )  (final  paragraph — 
unnumbered)  “The  Office  of  the  Federal 
Register  shall  annually  compile  and  pub¬ 
lish  the  rules  promulgated  under  this 
section  and  agency  notices  published 
under  section  (e)  (4)  of  this  section  in  a 
form  available  to  the  public  at  low  cost.” 

The  annual  compilation  of  public  no¬ 
tices  (subsection  (e)(4))  and  agency 
rules  (subsection  (f)  (1)  through  (5)) 
will  be  produced  in  a  form  which  pro¬ 
motes  the  exercise  of  Individual  rights 
under  this  Act 


The  General  Services  Administration 
will  issue  guidance  on  the  format  and 
timing  for  submission  of  rules  and  no¬ 
tices  to  reduce  the  cost  of  preparing  and 
publishing  the  rules  and  notices,  to  mini¬ 
mize  redundancy  wherever  possible,  and 
otherwise  to  enhance  the  utility  of  these 
publications.  For  example,  the  various 
provisions  of  subsection  (e)  (4)  and  (f) 
(1)  through  (4)  calling  for  lists  of  names 
and  addresses  need  not  be  treated  as 
separate  portions  of  the  annual  notice  for 
each  system. 

Subsection  (g)  Civil  Remedies 

This  subsection  prescribes  the  circum¬ 
stances  under  which  an  individual  may 
seek  court  relief  in  the  event  that  a  Fed¬ 
eral  agency  violates  any  requirement  of 
the  Privacy  Act  or  any  rule  or  regulation 
promulgated  thereunder,  the  basis  for 
judicial  intervention,  and  the  remedies 
which  the  courts  may  prescribe.  It  should 
be  noted  that  an  individual  may  have 
grounds  for  action  under  other  provisions 
of  the  law  in  addition  to  those  provided 
in  this  section.  For  example — 

An  individual  may  seek  judicial  review' 
under  other  provisions  of  the  Adminis¬ 
trative  Procedure  Act  (APA). 

An  individual  may  file  a  complaint  al¬ 
leging  possible  criminal  misconduct  un¬ 
der  section  (i) ,  below. 

A  Federal  employee  may  file  a  griev¬ 
ance  under  personnel  procedures.  It 
should  also  be  noted  that  an  agency/em¬ 
ployee  responsible  for  an  adverse  action 
against  an  Individual  may  be  personally 
subject  to  civil  suit,  particularly  where 
the  agency/employee  acted  in  a  manner 
that  was  intentional  or  willful. 

Judgments,  costs,  and  attorney's  fees 
assessed  against  the  United  States  under 
this  subsection  would  appear  to  be  pay¬ 
able  from  the  public  funds  rather  than 
agency  funds.  28  U.S.C.  2414  and  31 
U.S.C.  724a  (Payment  of  Judgments) ; 
28  U.S.C.  1924  (Costs).  While  it  is  not 
the  purpose  of  these  guidelines  to  discuss 
the  jurisdiction  of  the  district  courts  or 
the  procedures  in  such  cases,  it  should  be 
noted  that  most  cases  arising  under  sub¬ 
section  (g)  will  be  handled  by  the  Gen¬ 
eral  Litigation  Section  of  the  Civil  Divi¬ 
sion  of  the  Department  of  Justice.  In 
these  cases,  upon  receipt  of  a  copy  of  the 
summons  and  complaint  served  upon  the 
Attorney  General  and  notification  of  Its 
filing  by  the  United  States  Attorney  (see 
Rule  4,  Federal  Rules  of  Civil  Procedure) , 
the  General  Litigation  Section  will  re¬ 
quest  the  agency  to  furnish  a  litigation 
report. 

Some  agencies  are  authorized  to  con¬ 
duct  their  own  litigation.  Where  its  au¬ 
thority  permits,  the  agency  may  decide 
to  handle  its  own  cases  under  this  Act 
In  view  of  the  general  litigation  respon¬ 
sibility  which  the  Department  of  Justice 
has  for  all  other  departments  and  agen¬ 
cies  in  the  executive  branch,  it  is  impor¬ 
tant  that  agencies  handling  their  own 
litigation  under  this  Act  keep  the  De¬ 
partment  of  Justice  currently  informed 
of  their  progress,  and  forward  to  the 
Civil  Division  copies  of  significant  docu¬ 
ments  which  are  filed  in  such  cases. 

Each  agency  should  maintain  a  com¬ 
plete  and  careful  record  of  the  admin¬ 


istrative  procedures  followed  in  process¬ 
ing  this  statute.  The  record  should  be 
maintained  so  that  it  can  be  readily  cer¬ 
tified  as  the  complete  administrative  rec¬ 
ord  of  the  procedings  as  a  basis  for  pos¬ 
sible  use  in  litigation. 

Grounds  for  Action.  Subsection  <g) 
(1)  “Civil  Remedies.  Whenever  any 
agency” 

The  subsection  authorizing  civil  ac¬ 
tions  by  individuals  is  designed  to  assure 
that  an  individual  who  (1)  was  unsuc¬ 
cessful  in  an  attempt  to  have  an  agency 
amend  his  or  her  record;  (2)  was  im¬ 
properly  denied  access  to  his  or  her  rec¬ 
ord  or  to  information  about  him  or  her 
in  a  record;  (3)  was  adversely  affected 
by  an  agency  action  based  upon  an  im¬ 
properly  constituted  record;  or  (4)  was 
otherwise  injured  by  an  agency  action 
in  violation  of  the  Act  will  have  a  remedy 
in  the  Federal  District  courts. 

’  Refusal  to  Amend  a  Record.  Subsection 
(g)(1)(A)  “Makes  a  determination  un¬ 
der  subsection  (d)  (3)  of  this  section  not 
to  amend  an  individual’s  record  in  ac¬ 
cordance  with  his  request,  or  fails  to 
make  such  review  in  conformity  with 
that  subsection;” 

An  individual  may  seek  judicial  re¬ 
view  of  an  agency’s  determination  not 
to  amend  a  record  pursuant  to  a  re¬ 
quest  filed  under  subsection  (d)  (2)  un¬ 
der  either  one  of  two  conditions — 

The  individual  has  exhausted  his  ot¬ 
her  recourse  under  the  procedures  estab¬ 
lished  by  the  agency  pursuant  to  subsec¬ 
tion  (d)  (3)  (appeals  on  the  agency’s 
refusal  to  amend)  and  the  reviewing 
official  has  also  refused  to  amend  the 
record,  or 

The  individual  contends  that  the 
agency  has  not  considered  the  request 
to  review  in  a  timely  manner  or  other¬ 
wise  has  not  acted  in  a  manner  con¬ 
sistent  with  the  requirements  of  sub¬ 
section  (d)(3).  Such  ah  action  could 
presumably  involve  a  challenge  either  to 
the  agency’s  procedures  published  under 
subsection  (f )  (4)  or  to  the  agency  head’s 
decision  to  extend  the  period  of  review 
“for  good  cause  shown”  under  subsection 
(d)(3). 

An  individual  may  also  bring  a  civil 
action  based  on  allegedly  inaccurate  rec¬ 
ords  if  it  can  be  shown  that  a  decision 
adverse  to  the  individual  resulted  from 
that  inaccuracy.  See  subsection  (g)  (1) 

(C) .  However,  no  test  of  injury  is  re¬ 
quired  to  bring  an  action  under  subsec¬ 
tion  (g)(1)(A). 

The  basis  for  judicial  review  and  the 
available  remedies  in  actions  brought 
under  this  subsection  are  found  in  sub¬ 
section  (g)(2). 

Denial  of  Access  to  a  Record.  Subsec¬ 
tion  (g)  (1)  (B)  “Refuses  to  comply  with 
an  individual  request  under  subsection 
(d)  (1)  of  this  section;” 

Under  this  subsection,  individuals  may 
challenge  a  decision  to  deny  them  access 
to  records  to  which  they  consider  them¬ 
selves  entitled  (under  subsection  (d) 

(D) .  The  action  giving  rise  to  the  suit 
may  be  the  agency  head’s  determination 
(pursuant  to  subsection  (k) ,  specific  ex¬ 
emptions)  to  exempt  a  system  of  records 
from  the  requirements  that  Individuals 
be  granted  access.  “Since  access  to  a  file 
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is  the  key  to  insuring  the  citizen’s  right 
of  accuracy,  completeness,  and  relevancy, 
a  denial  of  access  affords  the  citizen  the 
right  to  raise  these  issues  in  court.  This 
would  be  the  means  by  which  a  citizen 
could  challenge  any  exemption  from  the 
requirements  of  [the  Actl.”  (Senate  Re¬ 
port  93-1183,  p.  82).  It  should  be  noted 
that  systems  of  records  covered  under 
subsection  ( j )*  (general  exemptions)  are 
permitted  to  be  exempted  from  this 
provision. 

This  provision  is  also  the  one  by  which 
individuals  may  contest  an  agency’s  re¬ 
fusal  to  grant  access  as  a  result  of  its 
interpretation  of  the  definitions  in  the 
Act  as  they  apply  to  information  main¬ 
tained  by  an  agency  and  for  the  exclu¬ 
sion  set  forth  in  subsection  (d)  (5) , 
denial  of  access  to  records  compiled  in 
reasonable  anticipation  of  litigation.  No 
test  of  injury  is  required  to  bring  action 
under  subsection  (g)(1)(B).  The  basis 
for  judicial  review  and  available  rem¬ 
edies  are  found  in  subsection  (g)  (3). 

Failure  to  Maintain  a  Record  Ac¬ 
curately.  Subsection  (g)  (1)  (C)  “Fails  to 
maintain  any  record  concerning  any  in¬ 
dividual  with  such  accuracy,  relevance, 
timeliness,  and  completeness  as  is  neces¬ 
sary  to  assure  fairness  in  any  determina¬ 
tion  relating  to  the  qualifications, 
character,  rights,  or  opportunities,  of,  or 
benefits  to  the  individual  that  may  be 
made  on  the  basis  of  such  record,  and 
consequently  a  determination  is  made 
which  is  adverse  to  the  individual;”  or 

An  individual  may  bring  an  action 
under  this  subsection  only  if  it  can  be 
shown  that  the  deficiency  in  the  record 
resulted  in  an  adverse  determination  by 
the  agency  which  maintained  the  record, 
on  the  basis  of  the  record.  “An  action 
also  lies  if  the  agency  makes  an  adverse 
determination  based  upon  a  record  which 
is  inaccurate,  untimely,  or  incomplete. 
However,  in  order  to  sustain  such  action, 
the  individual  must  demonstrate  the 
causal  relationship  between  the  adverse 
determination  and  the  incompleteness, 
inaccuracy,  irrelevance  or  untimeliness 
of  the  record.”  (House  Report  93-1416, 
p.  17) 

An  adverse  action  is  one  resulting  in 
the  denial  of  a  right,  benefit,  entitle¬ 
ment,  or  employment  by  an  agency 
which  the  individual  could  reasonably 
have  been  expected  to  have  been  given 
if  the  record  had  not  been  deficient.  This 
provision,  in  essence,  allows  an  individual 
to  test  the  agency’s  compliance  with  sub¬ 
section  (e)(5). 

It  should  also  be  noted  that,  under 
this  subsection,  an  agency  may  be  liable 
as  a  consequence  of  its  failure  to  main¬ 
tain  a  record  accurately  only  if  it  is 
shown  that  its  failure  has  been  “inten¬ 
tional  or  willful”  (subsection  (g)(4)). 
(No  such  test  is  required  under  the  pro¬ 
visions  of  subsection  (g)(1)(A),  above, 
under  which  an  Individual  can  seek  a 
review  of  the  accuracy  of  a  record.) 

Neither  this  subsection  nor  subsection 
(g)(1)(A)  was  Intended  to  permit  an 
individual  collaterally  to  attack  informa¬ 
tion  in  records  pertaining  to  him  which 
has  already  been  the  subject  of  or  for 


which  adequate  judicial  review  is  avail¬ 
able.  For  example,  these  provisions  were 
not  designed  to  afford  an  individual  an 
alternate  forum  in  which  he  can  chal¬ 
lenge  the  basis  for  a  criminal  conviction 
or  an  asserted  tax  deficiency. 

The  basis  for  judicial  review  and  avail¬ 
able  remedies  are  found  in  subsection 
(g)(4). 

Other  Failures  to  Comply  with  the  Act. 
Subsection  (g)(1)(D)  “Fails  to  comply 
with  any  other  provision  of  this  section, 
or  any  rule  promulgated  thereunder,  in 
such  a  way  as  to  have  an  adverse  effect 
on  an  individual,” 

In  addition  to  the  grounds  specified  in 
subsections  (g)(1)  (A)  through  (C) 

above,  an  individual  may  bring  an  ac¬ 
tion  for  any  other  alleged  failure  by  an 
agency  to  comply  with  the  requirements 
of  the  Act  or  failure  to  comply  with  any 
rule  published  by  the  agency  to  imple¬ 
ment  the  Act  (subsection  (f) )  provided  it 
can  be  shown  that — 

The  action  was  “intentional  or  will¬ 
ful’’; 

The  agency’s  action  had  an  “adverse 
effect”  upon  the  individual;  and 

The  “adverse  effect”  was  causally  re¬ 
lated  to  the  agency’s  actions. 

The  basis  for  judicial  review  and  avail¬ 
able  remedies  provided  by  this  Act  are 
found  in  subsection  (g)  (4). 

Basis  for  Judicial  Review  and  Reme¬ 
dies  for  Refusal  to  Amend  a  Record.  Sub¬ 
section  <gM2)  “(A)  In  any  suit  brought 
under  the  provisions  of  subsection  (g) 
(1)  t  A)  of  this  section,  the  court  may 
order  the  agency  to  amend  the  individ¬ 
ual’s  record  in  accordance  with  his  re¬ 
quest  or  in  such  other  way  as  the  court 
may  direct.  In  such  a  case  the  court  shall 
determine  the  matter  de  novo. 

“(B>  The  court  may  assess  against  the 
United  States  reasonable  attorney  fees 
and  other  litigation  costs  reasonably  in¬ 
curred  in  any  case  under  this  paragraph 
in  which  the  complainant  has  substan¬ 
tially  prevailed.” 

When  an  individual  seeks  judicial  re¬ 
view  of  the  accuracy,  timeliness,  com¬ 
pleteness,  or  relevance  of  a  record  either 
as  a  result  of  a  challenge  to  the  agency’s 
refusal  to  amend  a  record  or  because  the 
individual  alleges  that  the  agency’s  proc¬ 
ess  for  review  does  not  conform  to  sub¬ 
section  (d)(3),  the  court  is  required  to 
review  the  matter  as  if  it  were  an  initial 
determination  (de  novo).  Such  a  review 
may  extend  to  the  agency’s  criteria  estab¬ 
lished  in  conformance  with  subsections 
(e>  (1)  and  (5)  for  “accuracy,  relevance, 
timeliness,  and  completeness”  as  they  re¬ 
late  to  the  purposes  for  which  the  agency 
maintains  the  record. 

Unlike  the  judicial  review  of  a  denial 
•  of  access  to  a  record,  in  a  review  of  re¬ 
fusal  to  amend  a  record  the  burden  to 
justify  its  action  is  not  expressly  placed 
upon  the  agency  by  the  Privacy  Act.  This 
was  intended  to  result  in  placing  the 
burden  of  challenging  the  accuracy  of 
the  record  upon  the  individual.  As  a  re¬ 
sult,  agencies  should  not  maintain  addi¬ 
tional  records  solely  for  the  purpose  of 
validating  the  accuracy,  timeliness,  and 
completeness  or  relevance  of  other  rec¬ 
ords  they  maintain. 


If  the  court  finds  for  the  individual 
against  the  agency  it  may 

Direct  the  agency  to  amend  the  rec¬ 
ord  or  to  take  such  other  steps  as  it 
deems  appropriate. 

Require  the  agency  to  pay  court  costs 
and  attorney  fees.  “It  is  intended  that 
such  award  of  fees  not  be  automatic,  but 
rather,  that  the  courts  consider  the  cri¬ 
teria  as  delineated  in  the  existing  body 
of  law  governing  the  award  of  fees.” 
(House  Report  93-1416,  p.  17) 

Basis  for  Judicial  Review  and  Rem¬ 
edies  for  Denial  of  Access.  Subsection 
(g)-(3)“(A)  In  any  suit  brought  under 
the  provision  (g)(1)(B)  of  this  section, 
the  court  may  enjoin  the  agency  from 
withholding  the  records  and  order  the 
production  to  the  complainant  of  any 
agency  records  improperly  withheld 
from  him.  In  such  a  case  the  court  shall 
determine  the  matter  de  novo,  and  may 
examine  the  contents  of  any  agency  rec¬ 
ords  in  camera  to  determine  whether  the 
records  or  any  portion  thereof  may  be 
withheld  under  any  of  the  exemptions 
set  forth  in  subsection  (k)  of  this  section, 
and  the  burden  is  on  the  agency  to  sus¬ 
tain  its  action. 

(B)  The  court  may  assess  against  the 
United  States  reasonable  attorney  fees  and 
other  litigation  costs  reasonably  incurred  in 
any  case  under  this  paragraph  in  which  the 
complainant  has  substantially  prevailed. 

In  conducting  its  review, 

“[T]he  court  is  required  to  determine  sueh 
matters  de  novo!  mloe  and  the  burden  of 
proof  is  upon  the  agency  to  sustain  the  ex¬ 
emption.”  (House  Report  93-1414,  p.  17)  In 
view  of  the  sensitivity  of  some  of  the  records 
to  which  access  may  be  sought,  the  court,  in 
examining  those  records  may  do  so  in  camera. 
"A  person  seeking  access  to  a  file  which  he 
has  reason  to  believe  is  being  maintained  on 
him  for  the  purposes  of  determining  its  ac¬ 
curacy  and  completeness,  for  example,  or  to 
take  advantage  of  the  rights  afforded  him 
*  *  *  could  raise  the  question  of  the  pro¬ 
priety  of  the  exemption  which  denies  him 
access  to  his  files.  In  deciding  whether  the 
citizen  has  a  right  to  see  his  file  or  to  learn 
whether  the  agency  has  a  file  on  him,  the 
court  would  of  necessity  have  to  decide  the 
legitimacy  of  the  agency’s  reasons  for  the 
denial  of  access,  or  refusal  of  an  answer. 
The  Committee  intends  that  any  citizen  who 
is  denied  a  right  of  access  under  the  Act  may 
have  a  cause  of  action,  without  the  necessity 
of  having  to  show  that  a  decision  has  been 
made  on  the  basis  of  it,  and  without  having 
to  show  some  further  injury,  such  as  loss  of 
job  or  other  benefit,  that  might  stem  from 
the  denial  of  access.”  ( Senate  Report  93-1183, 
P-  82.) 

If  the  court  finds  for  the  individual 
against  the  agency,  it  may — 

Direct  the  agency  to  grant  the  indi¬ 
vidual  access  as  provided  under  subsec¬ 
tion  (d)(1),  above. 

Require  the  agency  to  pay  court  costs 
and  attorney  fees.  “It  is  intended  that 
such  award  of  fees  not  be  automatic,  but 
rather,  that  the  courts  consider  the  cri¬ 
teria  as  delineated  in  the  existing  body 
of  law  governing  the  award  of  fees.” 
(House  Report  93-1416,  p.  17) 

Basis  for  Judicial  Review  and  Reme¬ 
dies  for  Adverse  Determination  and 
Other  Failures  to  Comply.  Subsection 
(g)  (4)  “In  any  suit  brought  under  the 
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provisions  of  subsection  (g)(1)  (C)  or 
<D)  of  this  section  in  which  the  court 
determines  that  the  agency  acted  in  a 
manner  which  was  intentional  or  willful, 
the  United  States  shall  be  liable  to  the 
individual  in  an  amount  equal  to  the 
sum  of — 

“(A)  Actual  damages  sustained  by 
the  individual  as  a  result  of  the  refusal 
or  failure,  but  in  no  case  shall  a  person 
entitled  to  recovery  receive  less  than  the 
sum  of  $1,000;  and 

“(B)  The  costs  of  the  action  together 
with  reasonable  attorney  fees  as  deter¬ 
mined  by  the  court.” 

In  any  action  brought  for  failure  to 
comply  with  the  provisions  of  the  Act, 
other  than  those  covered  in  subsection 
(g)  (1)  (A)  and  (B)  (refusal  to  amend 
a  record  or  denial  of  access)  it  must  be 
shown  that — 

The  failure  of  the  agency  to  comply 
was  ‘‘intentional  or  willful;” 

There  was  injury  or  harm  to  the  indi¬ 
vidual;  and 

The  injury  was  causally  related  to  the 
alleged  agency  failure. 

As  indicated  above,  these  criteria  do 
not  apply  to  suits  brought  to  amend  a 
record  pursuant  to  subsection  (g)  (1)  (A) 
so  that  an  individual  may,  under  certain 
circumstances,  properly  bring  an  action 
either  under  subsections  (g)  (1)  (A)  or 
(g)(1)(C). 

When  the  court  finds  that  an  agency 
has  acted  willfully  or  intentionally  in 
violation  of  the  Act  in  such  a  manner  as 
to  have  an  adverse  effect  upon  the  in¬ 
dividual,  the  United  States  will  be  re¬ 
quired  to  pay 

Actual  damages  or  $1,000,  whichever 
is  greater 

Court  costs  and  attorney  fees. 

Unlike  subsections  (g)  (2)  and  (3) 
above,  which  make  the  award  of  court 
costs  and  attorney  fees  discretionary  in 
successful  suits  brought  under  subsec¬ 
tions  (g)(1)  (A)  and  (B),  such  awards 
are  required  to  be  made  in  actions  in 
which  the  individual  has  prevailed  under 
subsections  (g)(1)  (C)  and  (D).  See 
House  Report  93-1416,  pp.  17-18  and  the 
Congressional  Record,  December  18, 
1974,  P.H.  122445  for  further  discussion 
of  this  point. 

Jurisdiction  and  Time  Limits.  Subsec¬ 
tion  (g)  (5)  “An  action  to  enforce  any 
liability  created  under  this  section  may 
be  brought  in  the  district  court  of  the 
United  States  in  the  district  in  which  the 
complainant  resides,  or  has  his  principal 
place  of  business,  or  in  which  the  agency 
records  are  situated,  or  in  the  District 
of  Columbia,  without  regard  to  the 
amount  in  controversy,  within  two  years 
from  the  date  on  which  the  cause  of 
action  arises,  except  that  where  an 
agency  has  materially  and  willfully  mis¬ 
represented  any  information  required 
under  this  section  to  be  disclosed  to  an 
individual  and  the  information  so  mis¬ 
represented  is  material  to  establishment 
of  the  liability  of  the  agency  to  the  in¬ 
dividual  under  this  section,  the  action 
may  be  brought  at  any  time  within  two 
years  after  discovery  by  the  individual 
of  the  misrepresentation.  Nothing  in  this 
section  shall  be  construed  to  authorize 


any  civil  action  by  reason  of  any  injury 
sustained  as  the  result  of  a  disclosure 
of  a  record  prior  to  the  effective  date 
of  this  section.” 

Action  may  be  brought  In  the  district 
court  for  the  jurisdiction  In  which  the 
individual  resides,  or  has  a  place  of  busi¬ 
ness,  or  in  which  the  agency  records  are 
situated,  or  in  the  District  of  Columbia. 

"The  statute  of  limitations  is  two 
years  from  the  date  upon  which  the 
cause  of  action  arises,  except  for  cases 
in  which  the  agency  has  materially  or 
willfully  misrepresented  any  information 
required  to  be  disclosed  and  when  such 
misrepresentation  is  material  to  the  lia¬ 
bility  of  the  agency.  In  such  cases  the 
statute  of  limitations  is  two  years  from 
the  date  of  discovery  by  the  individual  of 
the  misrepresentation.”  (House  Report 
93-1416,  p.  18) 

A  suit  may  not  be  brought  on  the  basis 
of  injury  which  may  have  occurred  as 
a  result  of  an  agency’s  disclosure  of  a 
record  prior  to  September  27,  1975;  e.g., 
disclosure  w  ithout  the  consent  of  the  in¬ 
dividual  or  an  adverse  action  resulting 
from  a  disclosure.  This  language  is  in¬ 
tended  to  preclude  agencies  from  being 
held  liable,  under  this  law,  for  actions 
taken  prior  to  its  effective  date. 

Subsection  (h)  Rights  of  Legal 
Guardians 

Subsection  < h)  “For  the  purposes  of 
this  section,  the  parent  of  any  minor,  or 
the  legal  guardian  of  any  individual  who 
has  been  declared  to  be  incompetent  due 
to  physical  or  mental  incapacity  or  age 
by  a  court  of  competent  jurisdiction,  may 
act  on  behalf  of  the  individual.” 

This  section  is  intended  to  ensure  that 
minors  or  individuals  who  have  been 
declared  to  be  legally  incompetent  have  a 
means  of  exercising  their  rights  under 
the  Act.  It  also  has  the  effect  of  making 
individuals  acting  in  loco  parentis  to 
minors,  parents,  legal  guardians,  and 
custodians  the  same  as  the  individual  for 
purposes  of  giving  consent  for  disclosure 
(subsection  (b) )  and  being  informed  of 
the  purposes  for  which  records  are  main¬ 
tained  (subsection  (e)  (3) ) . 

It  should  be  noted  that  this  provision 
is  discretionary  and  that  individuals  who 
are  minors  are  authorized  to  exercise  the 
rights  given  to  them  by  the  Privacy  Act 
or,  in  the  alternative,  their  parents  or 
those  acting  in  loco  parentis  may  exercise 
them  in  their  behalf. 

(i)  Criminal  Penalties 

This  subsection  establishes  criminal 
sanctions  for  three  possible  violations 

Unauthorized  disclosure. 

Failure  to  publish  a  public  notice  or  a 
system  of  records  subject  to  the  Act. 

Obtaining  access  to  records  under  false 
pretenses. 

The  first  two  are  directed  at  actions  of 
officers  and  employees  of  Federal  agen¬ 
cies  and  (pursuant  to  subsection  (m)) 
certain  contractor  personnel.  Agencies 
should  ensure  that  all  personnel  are  in¬ 
formed  of  the  requirements  of  the  Act 
and,  pursuant  to  subsection  (e)  (9) ,  rules 
of  conduct,  are  given  periodic  training  in 
this  area. 


Criminal  Penalties  for  Unauthorized 
Disclosure.  Subsection  (i)*(l)  “Any  offi¬ 
cer  or  employee  of  an  agency,  who  by 
virtue  of  his  employment  or  official  posi¬ 
tion,  has  possession  of,  or  access  to, 
agency  records  which  contain  individu¬ 
ally  identifiable  information  the  disclo¬ 
sure  of  which  is  prohibited  by  this  section 
or  by  rules  or  regulations  established 
thereunder,  and  who  knowing  that  dis¬ 
closure  of  the  specific  material  is  so  pro-  - 
hibited,  willfully  discloses  the  material 
in  any  manner  to  any  person  or  agency 
not  entitled  to  receive  it,  shall  be  guilty 
of  a  misdemeanor  and  fined  not  more 
than  $5,000.” 

It  is  a  criminal  violation  of  the  pro¬ 
visions  of  the  Act  if  an  employee,  know¬ 
ing  that  disclosure  is  prohibited,  willfully 
discloses  a  record  without  the  written 
consent  of  the  individual  to  whom  it  per¬ 
tains,  at  his  or  her  request,  or  for  one  of 
the  reasons  set  forth  in  subsections  (b> 

(1)  through  (11),  conditions  of  dis¬ 
closure. 

Criminal  Penalties  for  Failure  To  Pub¬ 
lish  a  Public  Notice.  Subsection  (1)  (2) 
“Any  officer  or  employee  of  any  agency 
who  willfully  maintains  a  system  of  rec¬ 
ords  without  meeting  the  notice  require¬ 
ments  of  subsection  (e)  (4)  of  this  section 
shall  be  guilty  of  a  misdemeanor  and 
fined  not  more  than  $5,000.” 

As  was  discussed  in  connection  with 
subsection  (e)(4),  above,  a  basic  objec¬ 
tive  of  the  Act  is  to  assure  that  there  is 
no  system  of  records  whose  very  existence 
is  kept  secret.  An  agency  is  required  to 
publish  a  public  notice  about  each  system 
of  records  which  it  maintains.  It  is  a 
criminal  violation  of  the  Act  willfully  to 
maintain  a  system  of  records  and  not  to 
publish  the  prescribed  public  notice.  The 
exemption  provisions,  subsections  (j) 
and  (k),  do  not  allow  an  agency  head  to 
exempt  any  system  of  records  from  the 
requirement  to  publish  a  public  notice 
of  its  existence,  although  that  notice  may 
be  somewhat  abbreviated.  (See  subsec¬ 
tions  (a)(5),  definitions,  and  (e)(4), 
public  notice,  for  guidelines  on  what  con¬ 
stitutes  a  system.)  It  should  be  noted 
that,  under  agency  procedures,  the  officer 
or  employee  who  maintains  the  system 
may  not  be  the  one  who  is  responsible  for 
publishing  the  notice.  Agency  procedures 
should  make  the  responsibilities  of  each 
clear.  The  officer  or  employee  who  main¬ 
tains  the  system  has  an  obligation  to  no¬ 
tify  the  one  responsible  for  publishing 
the  notice.  Similarly  the  officer  or  em¬ 
ployee  responsible  for  publishing  the 
notice,  once  notified  of  the  existence  of  a 
system,  must  make  that  fact  public. 

Criminal  Penalties  for  Obtaining 
Records  under  False  Pretenses.  Subsec¬ 
tion  (i)(3)  “Any  person  who  knowingly 
and  willfully  requests  or  obtains  any  rec¬ 
ord  concerning  an  individual  from  an 
agency  under  false  pretenses  shall  be 
guilty  of  a  misdemeanor  and  fined  not 
more  than  $5,000.” 

This  provision  makes  it  a  criminal  act 
knowingly  and  willfully  to  request  or 
gain  access  to  a  record  about  an  individ¬ 
ual  under  false  pretenses.  It  is  likely  that 
the  principal  application  of  this  provi¬ 
sion  wrill  be  to  deter  individuals  from 
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making  fraudulent  requests  under  sub¬ 
section  (d)(1),  access  to  records. 

Subsections  (j)  and  (k)  Exemptions 

The  drafters  of  the  Act  recognized  that 
the  application  of  all  of  the  requirements 
of  the  Act  to  certain  categories  of  records 
would  have  had  undesirable  and  often 
unacceptable  effects  upon  agencies  in  the 
conduct  of  necessary  public  business. 

Two  categories  of  exemptions  are  es¬ 
tablished:  General  exemptions  (subsec¬ 
tion  (j))  and  specific  exemptions  (sub¬ 
section  (k)).  The  principal  difference 
between  the  two  categories  is  that  sys¬ 
tems  of  records  exempted  under  subsec¬ 
tion  (j)  may  be  exempted  from  more  pro¬ 
visions  of  the  Act  than  those  exempted 
under  subsection  (k>.  Exemptions  under 
subsection  (j)  may  be  exempted  from 
the  civil  remedies  provision  and,  in 
particular,  the  judicial  review  under  sub¬ 
sections  (g)(1)(B)  and  (g)(3),  civil 
remedies. 

In  applying  any  of  the  exemption  pro¬ 
visions  of  the  Act,  it  is  important  to 
recognize  the  following : 

No  system  of  records  is  automatically 
exempt  from  any  provision  of  the  Act. 
To  obtain  an  exemption  for  a  system 
from  any  requirement  of  the  Act,  the 
head  of  the  agency  that  maintains  the 
system  must  make  a  determination  that 
the  system  falls  within  one  of  the 
categories  of  systems  which  are  per¬ 
mitted  to  be  exempted,  and  publish  the 
determination  as  a  rule  in  accordance 
with  the  requirements  (including  gen¬ 
eral  notice)  of  section  553  of  the  Ad¬ 
ministrative  Procedure  Act.  That  notice 
must  include  the  specific  provisions  from 
which  the  system  is  proposed  to  be  ex¬ 
empted  and  why  the  agency  considers 
the  exemption  necessary. 

The  requirement  to  publish  a  public 
notice  (subsection  (e)  (4),  above)  applies 
to  all  systems  of  records  maintained  by 
an  agency.  Certain  other  provisions  such 
as  conditions  of  disclosure  (b),  account¬ 
ing  for  disclosures  ((c)  (1)  and  (2))  and 
restrictions  on  maintaining  records  on 
First  Amendment  activities  ((e)(7)) 
also  apply  to  all  systems  of  records. 
Agencies  may  not  exempt  any  system,  as 
defined  in  subsection  (a)  (5)  from  any  of 
these  requirements. 

In  some  instances,  systems  may  con¬ 
tain  records  which  are  subject  to  exemp¬ 
tion  under  more  than  one  subsection  in 
subsections  (j)  or  (k).  In  those  cases  the 
notices  claiming  exemption  should,  if 
possible,  specify  which  types  of  records 
are  subject  to  which  exemption. 

Agency  records  which  are  part  of  an 
exempted  system  may  be  disseminated 
to  other  agencies  and  incorporated  into 
their  non-exempt  records  systems.  The 
public  policy  which  dictates  the  need  for 
exempting  records  from  some  of  the  pro¬ 
visions  of  the  Act  is  based  on  the  need  to 
protect  the  contents  of  the  records  in  the 
system — not  the  location  of  the  records. 
Consequently,  in  responding  to  a  request 
for  access  where  documents  of  another 
agency  are  involved,  the  agency  receiv¬ 
ing  the  request  should  consult  the  orig¬ 
inating  agency  to  determine  if  the  rec¬ 
ords  in  question  have  been  exempted 


from  particular  provisions  of  the  Act.  A 
copy  of  the  request  may  be  forwarded  to 
the  originating  agency  for  handling  of 
its  documents  where  such  a  procedure 
would  result  in  a  more  rapid  response  to 
the  request  for  access  but  the  agency 
receiving  the  request  remains  responsible 
for  assuring  a  prompt  response. 

Agencies  which  elect  to  invoke  exemp¬ 
tions  are  encouraged  to  adopt  procedures 
similar  to  those  prescribed  by  the  Act 
wherever  appropriate.  For  example,  it 
may  be  appropriate  to  seek  an  exemption 
from  the  access  provision  ((d)(1))  for 
certain  prisoner  records  because  they 
contain  court  controlled  pre -sentence  re¬ 
ports,  but  a  more  limited  access  proce¬ 
dure  may  be  appropriate. 

Subsection  (j) — General  Exemptions — 
Applicability  and  Notice  Requirements 

Subsection  (j)  “Hie  head  of  any 
agency  may  promulgate  rules,  in  accord¬ 
ance  with  the  requirements  (including 
general  notice),  of  sections  553  (b)  (1), 
(2),  and  (3),  (c),  and  (e)  of  this  title,  to 
exempt  any  system  of  records  within  the 
agency  from  any  part  of  this  section  ex¬ 
cept  subsections  (b),  (c)  (1)  and  (2), 
(e)(4)  (A)  through  (F),  (e)  (6),  (7), 
(9),  (10),  and  (11),  and  (i)  if  the  system 
of  records  is — 

“(1)  *  •  * 

“(2)  •  •  • 

“At  the  time  rules  are  adopted  under 
this  subsection,  the  agency  shall  include 
in  the  statement  required  under  section 
553(c)  of  this  title,  the  reasons  why  the 
system  of  records  is  to  be  exempted  from 
a  provision  of  this  section.” 

This  section  permits  agency  heads  to 
exempt  systems  of  records  which  are 
maintained  by  the  Central  Intelligence 
Agency  or  for  criminal  law  enforcement 
purposes,  as  further  discussed  in  subsec¬ 
tions  (j)  (1)  and  (2),  below,  from  all 
provisions  of  the  Act  except  the — 

Conditions  of  disclosure,  ( (b) ) ; 

Accounting  for  disclosures  and  reten¬ 
tion  of  the  accounting,  ((c)  (1)  and 
(2) ) ; 

Annual  public  notice  except  for  pro¬ 
cedures  for  identifying  a  record,  gain¬ 
ing  access  to  it,  contesting  its  accuracy, 
and  identifying  the  sources  of  records, 
((e)  (4)  (A)  through  (F) ) ; 

Obligation  to  check  the  accuracy,  rel¬ 
evance,  timeliness,  and  completeness  of 
records  before  disclosing  them  to  a  per¬ 
son  other  than  another  agency  or  to  the 
public  under  the  Freedom  of  Informa¬ 
tion  Act,  ( (e)  (6) ) ; 

Restrictions  on  maintaining  records 
on  First  Amendment  activities, 

((e) (7)) ; 

Establishment  of  rules  of  oonduct  and 
administrative,  technical,  and  physical 
safeguards,  ((e)  (9)  and  (10),  respec¬ 
tively)  ; 

Publication  of  “routine  use”  notices 
((e)  (11) ) ;  and 

Criminal  penalties,  ( (i) ) . 

When  the  head  of  an  agency  deter¬ 
mines  that  a  system  of  records  main¬ 
tained  by  the  agency  should  be  exempted 
from  certain  provisions  of  the  Act,  a 
notice  must  be  published  in  the  Federal 
Register  which  specifies,  as  a  mini¬ 
mum: 


The  name  of  the  system  (This  should 
be  the  same  as  that  given  in  the  annual 
public  notice  under  subsection  (e)  (4) ) ; 

and 

The  specific  provisions  of  the  Act  from 
which  the  system  is  to  be  exempted  and 
the  reasons  therefor.  A  separate  reason 
need  not  be  stated  for  each  provision 
from  which  the  system  is  being  ex¬ 
empted,  where  a  single  explanation  will 
serve  to  explain  the  entire  exemption. 

The  agency  head’s  determination  is 
considered  to  be  a  rule  under  the  Ad¬ 
ministrative  Procedure  Act  (APA)  and 
is  subject  to  the  requirements  of  gen¬ 
eral  notice  and  public  comment  of  that 
Act,  5  U.S.C.  553.  While  general  notice 
of  a  proposed  rule  is  not  required  under 
the  APA  when  “persons  subject  thereto 
are  named  and  either  personally  served 
or  otherwise  have  actual  notice  there¬ 
of  *  •  the  use  of  the  phrase  “in¬ 
cluding  general  notice”  means  that  in¬ 
dividual  notifications  will  not  suffice. 

The  systems  of  records  and  the  num¬ 
ber  of  records  (i.e.,  individuals)  in  each, 
which  were  exempted  from  any  of  the 
provisions  of  the  Act  under  this  subsec¬ 
tion  will  be  required  to  be  included  in  the 
annual  report  prepared  as  required  by 
subsection  (p) .  It  should  be  emphasized 
that  the  exemption  provisions  are  per¬ 
missive;  i.e.,  an  agency  head  is  author¬ 
ized,  but  not  required,  to  exempt  a  system 
from  all  or  any  portion  of  selected  pro¬ 
visions  of  the  Act  when  he  or  she  deems 
it  to  be  in  the  best  interest  of  the  govern¬ 
ment  and  consistent  with  the  Act  and 
these  guidelines.  In  commenting  on  this 
provision,  the  House  Committee  noted: 

The  Committee  also  wishes  to  stress  that 
this  section  is  not  intended  to  require  the 
C.I.A.  and  criminal  justice  agencies  to  with¬ 
hold  all  their  personal  records  from  the  indi¬ 
viduals  to  whom  they  pertain.  We  urge  those 
agencies  to  keep  open  whatever  files  are 
presently  open  and  to  make  avaUable  in  the 
future  whatever  files  can  be  made  available 
without  clearly  infringing  on  the  ability  of 
the  agencies  to  fulfill  their  missions.  (House 
Report  93-1416,  p.  19) 

To  the  extent  practicable,  records  per¬ 
mitted  to  be  exempted  from  the  Act 
should  be  separated  from  those  which 
are  not.  Further,  while  the  language  per¬ 
mits  agency  heads  to  exempt  systems  of 
records,  agencies  should  exempt  only 
portions  of  systems  wherever  it  is  pos¬ 
sible. 

General  Exemption  for  the  Central 
Intelligence  Agency.  Subsection  (j)  (1) 
"Maintained  by  the  Central  Intelligence 
Agency ;  or” 

General  Exemption  for  Criminal  Law 
Enforcement  Records.  Subsection  (j)  (2) 
“Maintained  by  an  agency  or  component 
thereof  which  performs  as  its  principal 
function  any  activity  pertaining  to  the 
enforcement  of  criminal  laws,  including 
police  efforts  to  prevent,  control,  or  re¬ 
duce  crime  or  to  apprehend  criminals, 
and  the  activities  of  prosecutors,  courts, 
correctional,  probation,  pardon,  or  parole 
authorities,  and  which  consists  of  (A) 
information  compiled  for  the  purpose  of 
identifying  individual  criminal  offenders 
and  alleged  offenders  and  consisting  only 
of  identifying  data  and  notations  of  ar¬ 
rests,  the  nature  and  disposition  of  crim- 
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inal  charges,  sentencing,  confinement, 
release,  and  parole  and  probation  status; 
(B)  information  compiled  for  the  pur¬ 
pose  of  a  criminal  investigation,  includ¬ 
ing  reports  of  informants  and  investiga¬ 
tors,  and  associated  with  an  identifiable 
individual;  or  (C)  reports  identifiable  to 
an  individual  compiled  at  any  stage  of 
the  process  of  enforcement  of  the  crimi¬ 
nal  laws  from  arrest  or  indictment 
through  release  from  supervision.” 

Subsection  (k)  Specific  Exemptions 

Applicability  and  Notice  Requirements. 
Subsection  (k)  “The  head  of  any  agency 
may  promulgate  rules,  in  accordance 
with  the  requirements  (including  gen¬ 
eral  notice)  of  sections  553(b)  (1),  (2), 
and  (3),  (c),  and  (e)  of  this  title,  to 
exempt  any  system  of  records  within  the 
agency  from  subsections  (c)  (3) ,  (d) , 

(e) (1),  (e)(4)  (G),  (H),  and  (I)  and 

(f)  of  this  section  if  the  system  of  rec¬ 
ords  is — ” 

"(1)  •  *  • 

*  *  *  *  * 

“(7)  •  *  * 

“At  the  time  rules  are  adopted  under 
this  subsection,  the  agency  shall  include 
in  the  statement  required  under  section 
553(c)  of  this  title,  the  reasons  why  the 
system  of  records  is  to  be  exempted  from 
a  provision  of  this  section.” 

This  subsection  permits  agency  heads 
to  exempt  systems  of  records  from  a 
limited  number  of  provisions  of  the  Act. 
In  addition  to  the  provisions  from  which 
no  system  may  be  exempted  under  sub¬ 
section  (j),  a  system  which  falls  under 
any  one  of  the  seven  categories  listed  in 
this  subsection  may  not  be  exempted 
from  the  following  provisions: 

Informing  prior  recipients  of  cor¬ 
rected  or  disputed  records,  ((c)  (4) ) ; 

Collecting  information  to  be  used  In 
determinations  about  an  Individual  di¬ 
rectly  from  the  individual  to  whom  it 
pertains,  ((e)  (2)  ) ; 

Informing  individuals  asked  to  supply 
Information  of  the  authority  by  and 
purposes  for  which  it  is  collected  and 
whether  or  not  providing  the  informa¬ 
tion  is  mandatory,  ( (e)  (3) ) ; 

Maintaining  records  with  such  accu¬ 
racy,  completeness,  timeliness,  and  rele¬ 
vance  as  is  reasonable  for  the  agency’s 
purposes,  ((e)  (5)) ; 

Notifying  the  subjects  of  records 
disclosed  under  compulsory  process, 
((e)  (8)) ;  and 

Civil  remedies,  (g) . 

As  with  subsection  (j),  upon  deter¬ 
mining  that  a  system  is  to  be  exempted 
under  this  section,  the  agency  head  is  re¬ 
quired  to  publish  that  determination  as  a 
rule  under  the  Administrative  Procedure 
Act  subject  to  public  comment.  That 
notice  must,  as  a  minimum,  specify 

The  name  of  the  system  (as  in  the 
annual  notice  under  subsection  (e)  (4) ) ; 
and 

The  specific  provisions  of  the  Act  from 
which  the  system  is  to  be  exempted  and 
the  reason  therefor. 

The  agency  head’s  determination  is 
considered  to  be  a  rule  under  the  Ad¬ 
ministrative  Procedure  Act  (APA)  and  is 
subject  to  the  requirements  of  general 


notice  and  public  comment  of  that  Act,  5 
U.S.C.  553.  While  general  notice  of  a 
proposed  rule  is  not  required  under  the 
APA  when  “persons  subject  thereto  are 
named  and  either  personally  served  or 
otherwise  have  actual  notice  there¬ 
of  *  *  the  language  “including  gen¬ 
eral  notice”  means  that  individual  notifi¬ 
cation  will  not  suffice. 

In  addition,  the  systems  of  records  and 
the  number  of  records  in  each,  which 
were  exempted  from  any  of  the  provi¬ 
sions  of  the  Act  under  this  section  will  be 
required  to  be  included  in  the  annual 
report  required  by  subsection  (p) . 

It  should  also  be  noted  that  the  ex¬ 
emption  provisions  are  permissive;  i.e., 
an  agency  head  is  authorized,  but  not 
required,  to  exempt  a  system  when  he  or 
she  deems  it  to  be  in  the  best  interest  of 
the  government  and  consistent  with  the 
Act  and  these  guidelines.  “Also  as  with 
section  (j)  records,  the  Committee  urges 
agencies  maintaining  section  (k)  records 
to  open  those  documents  to  the  individ¬ 
uals  named  in  them  insofar  as  such 
action  would  not  impair  the  proper  func¬ 
tioning  of  those  agencies.”  (House  Report 
93-1416,  p.  20) 

In  the  process  of  utilizing  any  of  these 
exemptions,  agencies  should,  wherever 
practicable,  segregate  those  portions 
of  systems  for  which  an  exemption  is 
considered  necessary  so  as  to  hold  to  the 
minimum  the  amount  of  material  which 
is  exempted.  While  the  language  per¬ 
mits  agency  heads  to  exempt  entire  sys¬ 
tems  of  records,  the  language  of  certain 
of  the  specific  provisions  below  suggests 
that  it  may,  in  some  instances,  be  ap¬ 
propriate  to  exempt  only  portions  of  sys¬ 
tems  where  it  is  not  possible  to 
segregate  entire  systems.  For  example, 
records  containing  classified  material  to 
which  access  may  be  denied  under  (k)  (1) 
should  be  screened  to  permit  access 
to  unclassified  material,  and  only  these 
portions  of  investigative  material  which 
meet  all  of  the  criteria  in  (k)(2)  or  (5) 
should  be  withheld.  However,  in  the  case 
of  records  which  are  permitted  to  be  ex¬ 
empted  to  the  extent  that  their  disclosure 
would  reveal  the  identity  of  a  con¬ 
fidential  source,  extreme  care  should  be 
exercised  to  ensure  that  the  content  of 
any  records  being  segregated  does  not 
disclose  the  identity  of  the  source. 

Exemption  for  Classified  Material. 
Subsection  (k)  (1)  “Subject  to  the  provi¬ 
sions  of  section  552(b)  (1)  of  this  title;” 

This  subsection  permits  agency  heads 
to  exempt,  from  certain  provisions  of 
the  Act,  those  systems  of  records  which 
are  “(A)  specifically  authorized  under 
criteria  established  by  an  Executive  Or¬ 
der  to  be  kept  secret  in  the  interest  of 
national  defense  or  foreign  policy  and 
(B)  are  in  fact  properly  classified  pur¬ 
suant  to  such  Executive  Order.”  (5  U.S.C. 
552(b)(1),  as  amended  by  Public  Law 
93-502) 

The  Freedom  of  Information  Act,  as 
amended  by  P.L.  93-502,  authorizes  de 
novo  judicial  review  of  an  agency’s  deci¬ 
sion  to  classify  a  document,  including 
In  camera  examination  of  the  document 
when  the  court  deems  it  necessary  to  re¬ 
solve  a  dispute  as  to  whether  a  document 
is  properly  being  withheld  under  the  pro¬ 


visions  of  subsection  (b)  (1)  of  the  Free¬ 
dom  of  Information  Act.  See  the  Con¬ 
ference  Report  on  H.R.  12471,  House 
Report  93-1380,  pp  8-9. 

Useful  guidance  in  the  application  of 
this  provision  is  found  in  the  Senate 
Committee  report  discussion  of  a  similar 
provision  on  classified  materials : 

The  potential  for  serious  damage  to  the 
national  defense  or  foreign  policy  could  arise 
If  the  notice  describing  any  Information 
system  Included  categories  or  sources  of  In¬ 
formation  •  •  *  or  provided  Individuals  ac¬ 
cess  to  flies  maintained  about  them  *  •  » 

The  Committee  does  not  by  this  legislation 
Intend  to  Jeopardize  the  collection  of  intel¬ 
ligence  Information  related  to  national  de¬ 
fense  or  foreign  policy,  or  open  to  Inspection 
Information  classified  pursuant  to  Executive 
Order  11652  to  persons  who  do  not  have  an 
appropriate  security  clearance  or  need  to 
know. 

This  section  Is  not  Intended  to  provide  a 
blanket  exemption  to  all  Information  sys¬ 
tems  or  flies  maintained  by  an  agency  which 
deal  with  national  defense  and  foreign  policy 
Information.  Many  personnel  flies  and  other 
systems  may  not  be  subject  to  security 
classification  or  may  not  cause  damage  to 
the  national  defense  or  foreign  policy  simply 
by  permitting  the  subjeots  of  such  files  to 
Inspect  them  and  seek  changes  In  their  con¬ 
tents  under  this  Act.  (Senate  Report  93-1183, 
P-  74) 

Exemption  for  Investigatory  Material 
Compiled  for  Law  Enforcement  Purposes. 
Subsection  (k)  (2)  "Investigatory  mate¬ 
rial  compiled  for  law  enforcement  pur¬ 
poses,  other  than  material  within  the 
scope  of  subsection  (j)  (2)  of  this  section: 
Provided,  however.  That  if  any  individual 
is  denied  any  right,  privilege,  or  benefit 
that  he  would  otherwise  be  entitled  by 
Federal  law,  or  for  which  he  would  other¬ 
wise  be  eligible,  as  a  result  of  the  main¬ 
tenance  of  such  material,  such  material 
shall  be  provided  to  such  individual,  ex¬ 
cept  to  the  extent  that  the  disclosure  of 
such  material  would  reveal  the  identity 
of  a  source  who  furnished  information 
to  the  Government  under  an  express 
promise  that  the  Identity  of  the  source 
would  be  held  in  confidence,  or,  prior  to 
the  effective  date  of  this  section,  under 
an  implied  promise  that  the  identity 
of  the  source  would  be  held  in  confi¬ 
dence; 

This  provision  allows  agency  heads  to 
exempt  a  system  of  records  compiled  in 
the  course  of  an  investigation  of  an  al¬ 
leged  or  suspected  violation  of  civil  laws, 
including  violations  of  the  Uniform  Code 
of  Military  Justice  and  associated  regu¬ 
lations,  except  to  the  extent  that  the 
system  is  more  broadly  exempt  under  the 
provision  covering  records  maintained 
by  an  agency  whose  principal  function 
pertains  to  the  enforcement  of  criminal 
laws  (subsection  (j)  (2) ) .  This  exemp¬ 
tion  was  drafted  because  “[llndividual 
access  to  certain  law  enforcement  files 
could  impair  investigations,  particularly 
those  which  involve  complex  and  con¬ 
tinuing  patterns  of  behavior.  It  would 
alert  subjects  of  investigations  that  their 
activities  are  being  scrutinized,  and  thus 
allow  them  time  to  take  measures  to  pre¬ 
vent  detection  of  illegal  action  or  escape 
prosecution.”  (House  Report  93-11416, 
p.  19.) 
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The  phrase  “Investigatory  material 
compiled  for  law  enforcement  purposes’* 
is  the  same  phrase  as  opened  exemption 
(b)(7)  to  the  Freedom  of  Information 
Act  prior  to  its  recent  amendment  (Pub¬ 
lic  Law  93-502),  with  the  exception  of 
the  use  of  the  word  “material”  in  the 
Privacy  Act  for  the  word  “flies”  in  the 
now  amended  Freedom  of  Information 
Act  exemption.  The  intent  was  to  have 
the  same  meaning  given  to  this  phrase 
in  the  Privacy  Act  as  had  been  given  to  it 
in  the  Freedom  of  Information  Act  ex¬ 
cept  that  the  phrase  would  apply  to  ma¬ 
terial  as  opposed  to  entire  files.  The  case 
law,  then,  which  had  interpreted  “in¬ 
vestigatory”  and  “compiled”  and  “law 
enforcement  purposes”  for  the  now 
amended  portions  of  exemption  (b)(7) 
of  the  Freedom  of  Information  Act 
should  be  utilized  in  defining  those  terms 
as  they  appear  in  subsection  (k)  (2)  of 
the  Privacy  Act. 

It  was  further  recognized  that  “due 
process”  in  both  civil  action  and  criminal 
prosecution  will  assure  that  individuals 
have  a  reasonable  opportunity  to  learn 
of  the  existence  of,  and  to  challenge, 
investigatory  records  which  are  to  be 
used  in  legal  proceedings. 

To  the  extent  that  such  an  investi¬ 
gatory  record  is  used  as  a  basis  for  deny¬ 
ing  an  individual  any  right,  privilege,  or 
benefit  (including  employment)  to  which 
the  individual  would  be  entitled  in  the 
absence  of  that  record,  the  individual 
must  be  granted  access  to  that  record  ex¬ 
cept  to  the  extent  that  access  would  re¬ 
veal  the  identity  of  a  confidential  source. 

The  language  permitting  an  agency  to 
withhold  records  used  as  a  basis  for 
denying  a  benefit  to  the  extent  that  the 
record  would  reveal  the  identity  of  an 
individual  who  furnished  information  in 
confidence  is  very  narrowly  drawn  and 
must  be  treated  carefully  (see  also  sub¬ 
sections  (k)  (5)  and  (7),  below).  For 
information  collected  on  or  subsequent  to 
the  effective  date  of  this  section  (Sep¬ 
tember  27,  1975)  a  record  may  only  be 
withheld  to  protect  the  identity  of  a 
source  if 

An  express  guarantee  was  made  to  the 
source  that  his  or  her  identity  would 
not  be  revealed.  (Such  guarantees  should 
be  made  on  a  selective  basis;  i.e.,  indi¬ 
viduals  from  whom  information  is  solic¬ 
ited  for  law  enforcement  purposes 
should  be  advised  that  their  identity  may 
be  disclosed  to  the  individual  to  whom 
the  record  pertains  unless  a  source  ex¬ 
pressly  requests  tliat  his  or  her  identity 
not  be  revealed  as  a  condition  of  furnish¬ 
ing  the  information.) ;  and 

The  record,  if  stripped  of  the  identity 
of  the  source  would  nontheless  by  its 
content  reveal  the  identity  to  the  subject. 

It  was  recognized  that  the  type  of  in¬ 
vestigatory  record  covered  by  subsection 
(k)  (2)  currently  contains  substantial  in¬ 
formation  which  was  obtained  with  the 
tacit  understanding  that  the  identity  of 
the  source  would  not  be  revealed.  For 
this  reason  the  Act  provides  that  infor¬ 
mation  in  such  records  that  was  collected 
prior  to  the  effective  date  of  the  Act  may 
be  withheld  from  the  individual  to  whom 
it  pertains  to  the  extent  that  it  was  col¬ 
lected  under  an  implied  promise  that  its 
source  would  not  be  revealed  and  dis- 
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closing  it  would  reveal  the  identity  of  the 
source. 

The  phrase  “to  the  extent  that”  is  par¬ 
ticularly  important.  As  implied  above,  if 
a  record  can  be  disclosed  in  such  a  way 
as  to  conceal  its  source,  a  promise  of  con¬ 
fidentiality  to  the  source  is  not  sufficient 
grounds  for  withholding  it.  Obviously, 
the  content  of  certain  records  is  such 
that  it  reveals  the  identity  of  the  source 
even  if  the  name  of  the  source  or  other 
identifying  particulars  are  removed;  e.g., 
the  record  contains  information  that 
could  only  have  been  furnished  by  one 
individual  known  to  the  subject.  Only  in 
those  cases,  may  the  substance  of  the 
record  be  withheld  to  protect  the  identity 
of  a  source  and  then  only  to  the  extent 
necessary  to  do  so.  It  is  recognized,  how¬ 
ever  that  it  may  in  some  instances  be 
very  difficult  for  an  agency  to  know 
whether  the  content  of  a  record  would, 
in  and  of  itself,  reveal  its  source.  There¬ 
fore,  it  may  be  appropriate  in  light  of  the 
intent  underlying  this  exemption,  to 
exempt  a  record  when  any  reasonable 
doubt  exists  as  to  whether  its  disclosure 
would  reveal  the  identity  of  a  con¬ 
fidential  source. 

Additional  guidance  on  the  circum¬ 
stances  under  which  an  agency  may 
withhold  a  record  on  the  grounds  that 
its  disclosure  would  reveal  the  identity 
of  a  source  who  provided  information 
under  a  pledge  of  confidentiality  is  found 
in  Senator  Ervin’s  statement  on  the  com¬ 
promise  bill  on  the  floor  of  the  Senate. 

The  compromise  provision  for  the  main¬ 
tenance  of  information  received  from  con¬ 
fidential  sources  represents  an  acceptance 
of  the  House  language  after  receiving  an 
assurance  that  in  no  Instance  would  that 
language  deprive  an  individual  from  know¬ 
ing  of  the  existence  of  any  information 
maintained  in  a  record  about  him  which  was 
received  from  a  “confidential  source.”  The 
agencies  would  not  be  able  to  claim  that 
disclosure  of  even  a  small  part  of  a  particular 
item  would  reveal  the  identity  of  a  confi¬ 
dential  source.  The  confidential  information 
would  have  to  be  characterized  in  some  gen¬ 
eral  way.  Theface  of  the  Item’s  existence 
and  a  general  characterization  of  that  item 
would  have  to  be  made  known  to  the  in¬ 
dividual  in  every  case. 

Furthermore,  the  acceptance  of  this  section 
in  no  way  precludes  an  individual  from 
knowing  the  substance  and  source  of  con¬ 
fidential  information,  should  that  informa¬ 
tion  be  used  to  deny  him  a  promotion  in  a 
government  job  or  access  to  classified  in¬ 
formation  or  some  other  right,  benefit  or 
privilege  for  which  he  was  entitled  to  bring 
legal  action  when  the  government  wished  to 
base  any  part  of  its  legal  case  on  that 
information. 

Finally,  it  is  important  to  note  that  the 
House  provision  would  require  that  all  fu¬ 
ture  promises  of  confidentiality  to  sources 
of  Information  be  expressed  and  not  im¬ 
plied  promises.  Under  the  authority  to  pre¬ 
pare  guidelines  for  the  administration  of 
this  act  it  is  expected  that  the  Office  of 
Management  and  Budget  will  work  closer 
with  agencies  to  insure  that  Federal  inves¬ 
tigators  make  sparing  use  of  the  ability  to 
make  express  promises  of  confidentiality. 
(Congressional  Record,  December  17,  1974, 
p.  S  21816) 

The  foregoing  discussion  with  respect 
to  confidentiality  of  sources  Is  also  ap¬ 
plicable  to  the  provisions  of  subsections 

(k)  (5)  and  (7) ,  below. 
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Exemption  for  Records  Maintained  To 
Provide  Protective  Services.  Subsection 
(k)  (3)  “Maintained  in  connection  with 
providing  protective  services  to  the  Pres¬ 
ident  of  the  United  States  or  other  indi¬ 
viduals  pursuant  to  section  3056  of  title 
18;” 

This  exemption  covers  records  which 
are  not  clearly  within  the  scope  of  law 
enforcement  records  covered  under  sub¬ 
section  (k)  (2)  but  which  are  necessary 
to  assuring  the  safety  of  individuals 
protected  pursuant  to  18  U.S.C.  3056. 

It  was  noted  that  “access  to  Secret 
Service  intelligence  files  on  certain  in¬ 
dividuals  would  vitiate  a  critical  part  of 
Secret  Service  work  which  was  specifi¬ 
cally  recommended  by  the  Warren  Com¬ 
mission  that  investigated  the  assassina¬ 
tion  of  President  Kennedy  and  funded 
by  Congress.”  (House  Report  93-1416, 
p.  19) 

Exemption  for  Statistical  Records. 
Subsection  (k)  (4)  “Required  by  statute 
to  be  maintained  and  used  solely  as 
statistical  records;” 

A  “statistical  record”  is  defined  in 
subsection  (a)  (6)  as  “a  record  in  a  sys¬ 
tem  of  records  maintained  for  statis¬ 
tical  research  or  reporting  purposes 
only  and  not  used  in  whole  or  in  part 
in  making  any  determination  about  an 
identifiable  individual,  except  as  pro¬ 
vided  by  section  8  of  title  18.” 

It  is  the  intent  of  this  provision  to 
permit  exemptions  for  those  systems  of 
records  which  by  operation  of  statute 
cannot  be  used  to  make  a  determination 
about  an  individual. 

This  provision  permits  an  agency 
head  to  exempt  a  system  of  records 
which  is  used  only  for  statistical,  re¬ 
search,  or  program  evaluation  purposes, 
and  which  is  not  used  to  make  decisions 
on  the  rights,  benefits,  or  entitlements 
of  individuals  except  as  permitted  by 
section  8  of  Title  13.  The  use  of  the 
language  “required  by  statute  to  be 
maintained  *  *  *  only”  suggests  that  sys¬ 
tems  of  records  which  qualify  to  be  ex¬ 
empted  under  this  provision  are  those 
composed  exclusively  of  records  that  by 
statute  are  prohibited  from  being  used 
for  any  purpose  involving  the  making  of 
a  determination  about  the  individual  to 
whom  they  pertain;  not  merely  that  the 
agency  does  not  engage  in  such  uses. 

Disclosure  of  statistical  records  [to  the 
Individual]  In  most  Instances  would  not 
provide  any  benefit  to  anyone,  for  these 
records  do  not  have  a  direct  effect  on  any 
given  Individual;  It  would,  however.  Inter¬ 
fere  with  a  legitimate.  Congressional  ly- 
sanctioned  activity.  (House  Report  93- 
1416,  p.  19) 

Exemption  for  Investigatory  Material 
Compiled  for  Determining  Suitability  for 
Federal  Employment  or  Military  Service. 
Subsection  (k)  (5)  “Investigatory  mate¬ 
rial  compiled  solely  for  the  purpose  of 
determining  suitability,  eligibility,  or 
qualifications  for  Federal  civilian  em¬ 
ployment,  military  service,  Federal  con¬ 
tracts,  or  access  to  classified  informa¬ 
tion,  but  only  to  the  extent  that  the  dis¬ 
closure  of  such  material  would  reveal 
the  identity  of  a  source  who  furnished 
Information  to  the  Government  under  an 
express  promise  that  the  identity  of  the 
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source  would  be  held  in  confidence,  or, 
prior  to  the  effective  date  of  this  section, 
under  an  implied  promise  that  the  iden¬ 
tity  of  the  source  would  be  held  in 
confidence”; 

This  provision  permits  an  agency  to 
exempt  material  from  the  individual  ac¬ 
cess  provision  of  the  Act  which  would 
cause  the  identity  of  a  confidential  source 
to  be  revealed  only  if  all  of  the  following 
conditions  are  met : 

The  material  is  maintained  only  for 
purposes  of  determining  an  individual’s 
qualifications,  eligibility  or  suitability  for 
military  service,  employment  in  the  ci¬ 
vilian  service  or  on  a  Federal  contract, 
or  access  to  classified  material.  By  im¬ 
plication,  employment  would  include  ap¬ 
pointments  to  Federal  advisory  commit¬ 
tees  or  to  membership  agencies,  whether 
or  not  salaried; 

The  material  is  considered  relevant 
and  necessary  to  making  a  judicious  de¬ 
termination  as  to  qualifications,  eligibil¬ 
ity  or  suitability  and  could  only  be 
obtained  by  providing  assurance  to  the 
source  that  his  or  her  identity  would  not 
be  revealed  to  the  subject  of  the  record; 
e.g.,  for  “critical  sensitive  positions;” 
and 

Disclosure  of  the  record  with  the 
identity  of  the  source  removed  would 
likely  reveal  the  identity  of  the  source; 
e.g.,  the  record  contains  information 
which  could  only  have  been  furnished  by 
one  of  several  individuals  known  to  the 
subject. 

(Since  information  collected  prior  to 
the  effective  date  of  the  Act  may  have 
been  gathered  under  an  implied  promise 
of  confidentiality,  that  pledge  may  be 
honored  and  those  records  exempted  if 
the  other  criteria  are  met.) 

See  subsection  (k)(2),  above,  for  a 
more  extensive  discussion  of  the  circum¬ 
stances  under  which  records  may  be 
withheld  to  protect  the  identity  of  a  con¬ 
fidential  source. 

This  language  was  included  to  take 
into  account  the  fact  that  the  screening 
of  personnel  to  assure  that  only  those 
who  are  properly  qualified  and  trust¬ 
worthy  are  placed  in  governmental  posi¬ 
tions  will,  from  time  to  time,  require  in¬ 
formation  to  be  collected  under  a  pledge 
of  confidentiality.  Such  pledges  will  be 
limited  only  to  the  most  compelling  cir¬ 
cumstances;  i.e.. 

Without  the  information  thus  ob¬ 
tained,  unqualified  or  otherwise  unsuit¬ 
able  individuals  might  be  selected;  or 

The  potential  source  would  be  unwill¬ 
ing  to  provide  needed  information  with¬ 
out  a  guarantee  that  his  or  her  Identity 
will  not  be  revealed  to  the  subject;  or 

To  be  of  value  in  the  personnel  screen¬ 
ing  and  often  highly  competitive  assess¬ 
ments  in  which  it  will  be  used,  the  infor¬ 
mation  must  be  of  such  a  degree  of 
frankness  that  it  can  only  be  obtained 
under  an  express  promise  that  the  iden¬ 
tity  of  its  source  will  not  be  revealed. 

The  Civil  Service  Commission  and  the 
Department  of  Defense  (for  military 
personnel)  will  issue  regulations  estab¬ 
lishing  procedures  for  determining  when 
a  pledge  of  confidentiality  is  to  be  made 
and  otherwise  to  implement  this  subsec¬ 


tion.  These  regulations  and  any  imple¬ 
menting  procedures  will  not  provide  that 
all  information  collected  on  Individuals 
being  considered  for  any  particular  cate¬ 
gory  of  positions  will  automatically  be 
collected  under  a  guarantee  that  the 
identity  of  the  source  will  not  be  revealed 
to  the  subject  of  the  record. 

This  provision  has  been  among  the 
most  misunderstood  in  the  Act.  It  should 
be  noted  that  it  grants  authority  to 
exempt  records  only  under  very  limited 
circumstances.  “It  will  not  be  the  cus¬ 
tomary  thing  to  make  these  promises  of 
confidentiality,  so  that  most  all  of  the 
information  [in  investigatory  records] 
will  be  made  available."  (Congressional 
Record,  November  20,  1974,  p.  10887.) 

The  term  “Federal  contracts”  covers 
investigatory  material  on  individuals  be¬ 
ing  considered  for  employment  on  an  ex¬ 
isting  Federal  contract  as  well  as  in¬ 
vestigatory  material  complied  to  evaluate 
the  capabilities  of  firms  being  consid¬ 
ered  in  a  competitive  procurement. 

Exemption  for  Testing  or  Examina¬ 
tion  Material.  Subsection  (k)  (6)  “Test¬ 
ing  or  examination  material  used  solely 
to  determine  individual  qualifications 
for  appointment  or  promotion  in  the 
Federal  service  the  disclosure  of  which 
would  compromise  the  objectivity  or 
fairness  of  the  testing  or  examination 
process;” 

This  provision  permits  an  agency  to 
exempt  testing  or  examination  material 
used  to  assess  the  qualifications  of  an 
individual  for  appointment  or  promo¬ 
tion  in  the  military  or  civilian  service 
only  if  disclosure  of  the  record  to  the 
individual  would  reveal  information 
about  the  testing  process  which  would 
potentially  give  an  individual  an  unfair 
competitive  advantage.  For  example,  the 
Civil  Service  Commission  and  the  mili¬ 
tary  departments  give  written  examina¬ 
tions  which  cannot  be  revised  in  their 
entirety  each  time  they  are  offered.  Ac¬ 
cess  to  the  examination  questions  and 
answers  could  give  an  individual  an  un¬ 
fair  advantage.  This  language  also 
covers  certain  of  the  materials  used  in 
rating  individual  qualifications.  This 
subsection  permits  the  agency  to  with¬ 
hold  a  record  only  to  the  extent  that  its 
disclosure  would  reveal  test  questions  or 
answers  or  testing  procedures. 

It  was  not  the  intent  of  this  subsection 
to  permit  exemptions  of  information 
which  are  required  to  be  made  avail¬ 
able  to  employees  or  members  or  are,  in 
fact,  made  available  to  them  as  a  mat¬ 
ter  of  current  practice.  The  presence  of 
exemption  (k)  (7)  is  an  indication  of  the 
intended  narrow  coverage  of  the  exemp¬ 
tions  set  forth  in  (k)  (6)  and,  similarly, 
the  exemptions  of  (k)  (7)  and  (k)  (6) 
indicate  the  intended  narrow  coverage 
of  the  exemption  set  forth  in  subsection 
(k) (5). 

Exemption  for  Material  Used  To  Eval¬ 
uate  Potential  for  Promotion  in  the 
Armed  Services.  Subsection  (k)  (7) 
“Evaluation  material  used  to  determine 
potential  for  promotion  in  the  armed 
services,  but  only  to  the  extent  that  the 
disclosure  of  such  material  would  reveal 
the  Identity  of  a  source  who  furnished 


information  to  the  Government  under  an 
express  promise  that  the  identity  of  the 
source  would  be  held  in  confidence,  or, 
prior  to  the  effective  date  of  this  section, 
under  an  implied  promise  that  the  iden¬ 
tity  of  the  source  would  be  held  in  con¬ 
fidence.” 

The  discussions  of  subsection  (k)  (2) 
and  (5),  above,  should  be  reviewed  in 
applying  this  provision.  The  same  ra¬ 
tionale  regarding  when  and  how  the 
confidentiality  of  sources  may  be  pro¬ 
tected  applies  here. 

The  military  departments  will  publish 
regulations  specifying  those  categories 
of  positions  in  the  Armed  Services  for 
which  pledges  of  confidentiality  may  be 
made  when  obtaining  information  on  an 
individual's  suitability  for  promotion. 
These  categories  will  be  narrowly  drawn. 

Subsection  (1)  Archival  Records 

This  subsection  addresses  the  mainte¬ 
nance  of  those  records  which  are  trans¬ 
ferred  to  the  General  Services  Adminis¬ 
tration.  It  should  be  noted  that  there  is 
a  substantial  difference  between 

Records  which  have  been  placed  in 
records  centers  operated  by  the  Adminis¬ 
trator  of  General  Services  for  “storage 
processing  and  servicing”  pursuant  to 
Section  3103  of  Title  44;  and 

Records  which  are  accepted  by  the 
Adiyiinistrator  of  General  Services  “for 
deposit  in  the  National  Archives  of  the 
United  States  [because  they]  have  suffi¬ 
cient  historical  or  other  value  to  warrant 
their  continued  preservation  by  the 
United  States  Government”  pursuant  to 
Section  2103  of  Title  44. 

The  former,  those  for  which  the 
General  Services  Administration  is  es¬ 
sentially  a  custodian,  are  addressed  in 
subsection  (1)(1).  The  latter,  archival 
records  which  have  been  transferred  to 
the  Archives  and  are  maintained  by  the 
Archivist,  are  addressed  in  subsections 
(1)  (2)  and  (1)  (3) . 

Records  Stored  in  GSA  Records 
Centers.  Subsection  (1)  (1)  “Each  agency 
record  which  is  accepted  by  the  Adminis¬ 
trator  of  General  Services  for  storage, 
processing,  and  servicing  in  accordance 
with  section  3103  of  title  44  shall,  for  the 
purposes  of  this  section,  be  considered  to 
be  maintained  by  the  agency  which  de¬ 
posited  the  record  and  shall  be  subject  to 
the  provisions  of  this  section.  The 
Administrator  of  General  Services  shall 
not  disclose  the  record  except  to  the 
agency  which  maintains  the  record,  or 
under  rules  established  by  that  agency 
which  are  not  inconsistent  with  the  pro¬ 
visions  of  this  section.” 

Records  which  are  sent  to  the  General 
Services  Administration  for  storage  as  a 
result  of  determination  by  the  agency 
head  that  to  do  so  would  “effect  sub¬ 
stantial  economies  or  increase  operating 
efficiency,”  (44  U.S.C.  3103),  are  deemed 
to  be  part  of  the  records  of  the  agency 
which  sent  them  and  are  subject  to  the 
Act  to  the  same  extent  that  they  would  be 
If  maintained  on  the  agency’s  premises. 

This  language,  in  effect,  constitutes  a 
clarification  of  the  term  “maintain” 
(subsection  (a)(3))  with  respect  to 
records  which  have  been  physically 
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transferred  to  GSA  for  storage.  While 
records  are  stored  In  a  records  center, 
the  agency  which  sent  them  to  storage 
remains  accountable  for  them  and  the 
General  Services  Administration  effec¬ 
tively  functions  as  an  agent  of  that 
agency  and  maintains  them  pursuant  to 
rules  established  by  that  agency. 

Records  stored  in  records  centers  often 
constitute  the  Inactive  portion  of  systems 
of  records,  the  remainder  of  which  are 
kept  on  agency  premises;  e.g.,  agency 
payroll  and  personnel  records.  When¬ 
ever  practicable,  these  Inactive  records 
should  be  treated  as  part  of  the  total  sys¬ 
tem  of  records  and  be  subject  to  the  same 
rules  and  procedures.  In  no  case  may  they 
be  subject  to  rules  which  are  inconsistent 
with  the  Privacy  Act. 

To  assure  the  orderly  and  effective  op¬ 
eration  of  the  records  center  and  consist¬ 
ent  with  its  authority  to  issue  regulations 
governing  Federal  agency  records  man¬ 
agement  policies  (under  title  44  of  the 
United  States  Code) ,  the  Privacy  Act  and 
these  guidelines;  the  General  Services 
Administration  shall  issue  general  guide¬ 
lines  to  the  agencies  on  preferred  meth¬ 
ods  for  handling  systems  of  records 
stored  in  Federal  records  centers.  In  view 
of  the  intent  underlying  this  provision, 
agencies  may  consider  that  the  records 
stored  in  Federal  records  centers  are 
transferred  intra-agency  and  need  not 
publish  notice  of  “routine  uses’’  to  enable 
these  transfers. 

Records  Archived  Prior  to  September 
27,  1975.  Subsection  (1)  (2)  “Each  agency 
record  pertaining  to  an  identifiable  in¬ 
dividual  which  was  transferred  to  the 
National  Archives  of  the  United  States 
Government  as  a  record  which  has  suf¬ 
ficient  historical  or  other  value  to  war¬ 
rant  its  continued  preservation  by  the 
United  States  Government,  prior  to  the 
effective  date  of  this  section,  shall,  for 
the  purposes  of  this  section,  be  considered 
to  be  maintained  by  the  National  Ar¬ 
chives  and  shall  not  be  subject  to  the 
provisions  of  this  section,  except  that  a 
statement  generally  describing  such  rec¬ 
ords  (modeled  after  the  requirements  re¬ 
lating  to  records  subject  to  subsections 
(e)  (4)  (A)  through  (G)  of  this  section) 
shall  be  published  in  the  Federal  Reg¬ 
ister.” 

Records  transferred  to  the  Archives  for 
“preservation”  pursuant  to  44  U.S.C. 
2103,  prior  to  September  27, 1975  are  con¬ 
sidered  to  be  maintained  by  the  Archives 
but  are  not  subject  to  other  provisions  of 
the  Act. 

However,  the  National  Archives  is  re¬ 
quired  to  issue  general  notices  describing 
its  current  holdings  which  cover,  to  the 
extent  applicable,  the  elements  specified 
in  subsection  (e)(4).  These  should  in¬ 
clude,  as  a  minimum — 

The  categories  of  individuals  on  whom 
records  are  maintained; 

The  types  of  information  in  those  rec¬ 
ords;  and 

Policies  governing  access  and  retrieval. 

“It  is  intended  that  the  notice  provi¬ 
sion  not  be  applied  separately  and  specif¬ 
ically  to  each  of  the  many  thousands  of 
separate  systems  of  records  transferred 
to  the  Archieves  prior  to  the  effective 
date  of  this  Act,  but  rather  that  a  more 


general  description  be  provided  which 
pertains  to  meaningful  groupings  of  rec¬ 
ord  systems.”  (Congressional  Record,  De¬ 
cember  18,  1974,  p.  H12245) 

If,  for  any  reason,  a  record  currently 
in  the  Archives  is  disclosed  to  an  agency 
for  use  by  that  agency  in  making  a  de¬ 
termination  as  to  the  rights,  benefits,  or 
entitlements  of  an  individual,  it  becomes 
subject  to  the  provisions  of  the  Act  to  the 
same  extent  as  any  other  record  main¬ 
tained  by  that  agency. 

Records  Archived  On  or  After  Septem¬ 
ber  27,  1975.  Subsection  ( 1 )  (3)  “Each 
agency  record  pertaining  to  an  identifi¬ 
able  individual  which  is  transferred  to 
the  National  Archives  of  the  United 
States  as  a  record  which  has  sufficient 
historical  or  other  value  to  warrant  its 
continued  preservation  by  the  United 
States  Government,  on  or  after  the  ef¬ 
fective  date  of  this  section,  shall,  for  the 
purposes  of  this  section,  be  considered 
to  be  maintained  by  the  National  Ar¬ 
chives  and  shall  be  exempt  from  the  re¬ 
quirements  of  this  section  except  subsec¬ 
tions  (e)  (4)  (A)  through  (G)  and  (e)  (9) 
of  this  section.” 

Records  transferred  to  the  Archives 
pursuant  to  44  U.S.C.  2103  (for  “preser¬ 
vation”)  on  or  after  September  27,  1975 
are  considered  to  be  maintained  by  the 
Archives  for  purposes  of  the  Act  but  are 
only  subject  to  selected  provisions  of  the 
Act.  “[They]  are  subject  only  to  those 
provisions  of  this  Act  requiring  annual 
public  notice  of  the  existence  and  char¬ 
acter  of  the  information  systems  main¬ 
tained  by  the  Archives,  establishment  of 
appropriate  safeguards  to  insure  the  se¬ 
curity  and  integrity  of  preserved  personal 
information,  and  promulgation  and  im¬ 
plementation  of  rules  to  insure  the  effec¬ 
tive  enforcement  of  those  safeguards." 
(Congressional  Record,  December  18. 
1974,  p.H  12245.) 

The  notice  required  for  these  records  is 
on  a  system  by  system  basis.  “Since  the 
records  would  already  have  been  orga¬ 
nized  in  conformity  with  the  require¬ 
ments  of  this  section  by  the  agency 
transferring  them  to  the  Archives,  main¬ 
taining  them  in  continued  conformity 
with  this  law  would  not  require  any  spe¬ 
cial  effort.”  (House  Report  93-1416, 

p.  20.) 

The  exclusion  of  archival  records  from 
the  provisions  of  the  Act  establishing  the 
right  to  have  access  or  to  amend  a  record 
was  also  discussed  in  the  House  Report: 

Records  under  the  control  of  the  Archives 
would  not,  however,  be  subject  to  the  pro¬ 
visions  of  this  law  which  permit  changes  in 
documents  at  the  request  of  the  Individual 
named  in  them.  A  basic  archival  rule  holds 
that  archivists  may  not  remove  or  amend  in¬ 
formation  in  any  records  placed  in  their  cus¬ 
tody.  The  principle  of  maintaining  the  in¬ 
tegrity  of  records  is  considered  one  of  the 
most  important  rules  of  professional  conduct. 
It  is  important  because  historians  quite 
properly  want  to  learn  the  true  condition  of 
past  government  records  when  doing  re¬ 
search;  they  frequently  find  the  fact  that  a 
record  was  inaccurate  is  at  least  as  important 
as  the  fact  that  a  record  was  accurate. 

The  Committee  believes  that  this  rule  is 
eminently  reasonable  and  should  not  be 
breached  even  in  the  case  of  individually 
identifiable  records.  Once  those  documents 
are  given  to  the  Archives,  they  are  no  longer 


used  to  make  any  determination  about  any 
individual,  so  amendment  of  them  would  not 
aid  anyone.  Furthermore,  the  Archives  has  no 
way  of  knowing  the  true  state  of  contested 
information,  since  it  does  not  administer  the 
program  for  which  the  data  was  collected;  it 
cannot  make  Judgments  as  to  whether  rec¬ 
ords  should  be  altered.  (House  Report  93- 
1416,  p.  21). 

The  Archivist  is  required  to  establish 
rules  of  conduct  for  GSA  personnel  to  as¬ 
sure  that  records  in  the  Archives  are  used 
only  in  a  manner  consistent  with  44 
U.S.C.  2103  and  that  Archives  personnel 
are  properly  instructed  in  the  rules  gov¬ 
erning  access  to  and  use  of  archival 
records. 

However,  when  a  record  which  has 
been  deposited  in  the  Archives  is  dis¬ 
closed  to  an  agency  and  becomes  part  of 
any  agency’s  records  which  could  be  used 
in  making  a  determination  about  an  in¬ 
dividual,  that  record  would  again  be  sub¬ 
ject  to  the  other  applicable  provisions  of 
the  Act. 

Subsection  (m)  Government 
Contractors 

Subsection  (m)  “When  an  agency  pro¬ 
vides  by  a  contract  for  the  operation  by 
or  on  behalf  of  the  agency  of  a  system 
of  records  to  accomplish  an  agency  func¬ 
tion,  the  agency  shall,  consistent  with  its 
authority,  cause  the  requirements  of  this 
section  to  be  applied  to  such  system.  For 
purposes  of  subsection  (i)  of  this  section 
any  such  contractor  and  any  employee 
of  such  contractor,  if  such  contract  is 
agreed  to  on  or  after  the  effective  date  of 
this  section,  shall  be  considered  to  be  an 
employee  of  an  agency.” 

The  extent  to  which  the  provisions  of 
the  Act  would  apply  to  records  other  than 
those  physically  maintained  by  Federal 
agency  personnel  was  one  of  the  princi¬ 
pal  areas  of  difference  between  the  Sen¬ 
ate  and  House  privacy  bills  (S.  3418  and 
H.R.  16373). 

The  Senate  bill  would  have  extended  its 
provisions  outside  the  Federal  government 
only  to  those  contractors,  grantees  or  par¬ 
ticipants  in  agreements  with  the  Federal 
government,  where  the  purpose  of  the  con¬ 
tract,  grant  or  agreement  was  to  establish  or 
alter  an  information  system.  It  addressed 
a  concern  over  the  policy  governing  the  shar¬ 
ing  of  Federal  criminal  history  information 
with  State  and  local  government  law  en¬ 
forcement  agencies  and  for  the  amount  of 
money  which  has  been  spent  through  the  Law 
Enforcement  Assistance  Administration  for 
the  purchase  of  State  and  local  government 
criminal  information  systems. 

The  compromise  amendment  would  now 
permit  Federal  law  enforcement  agencies  to 
determine  to  what  extent  their  information 
systems  would  be  covered  by  the  Act  and 
to  what  extent  they  will  extend  that  cover¬ 
age  to  those  with  which  they  share  that  in¬ 
formation  or  resources. 

At  the  same  time  it  is  recognized  that  many 
Federal  agencies  contract  for  the  operation  of 
systems  of  records  on  behalf  of  the  agency 
in  order  to  accomplish  an  agency  function.  It 
was  provided  therefore  that  such  contracts 
if  agreed  to  on  or  after  the  effective  date  of 
this  legislation  shall  provide  that  those  con¬ 
tractors  and  any  employees  of  those  contrac¬ 
tors  shall  be  considered  to  be  employees  of  an 
agency  and  subject  to  the  provisions  of  the 
legislation.  (Congressional  Record,  Dec.  17, 
1974,  p.  S21818) 
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It  was  also  agreed  that  the  Privacy 
Protection  Study  Commission  should  be 
directed  to  study  the  applicability  of  the 
provisions  of  the  Privacy  Act  to  the  pri¬ 
vate  sector  and  make  recommendations 
to  the  Congress  and  the  President  (See 
subsection  5(b)  of  the  Act). 

The  effect  of  this  provision  is  to 
clarify,  further,  the  definition  of  the 
term  “maintain”  as  it  establishes  agency 
accountability  for  systems  of  records. 
(See  subsection  (a)  (3) ) .  It  provides  that 
systems  operated  under  a  contract  which 
are  designed  to  accomplish  an  agency 
function  are,  in  effect,  deemed  to  be 
maintained  by  the  agency.  It  was  not  in¬ 
tended  to  cover  private  sector  record 
keeping  systems  but  to  cover  de  facto  as 
well  as  de  jure  Federal  agency  systems. 

“Contract”  covers  any  contract,  writ¬ 
ten  or  oral,  subject  to  the  Federal  Pro¬ 
curement  Regulations  (FPR's)  or  Armed 
Services  Procurement  Regulations 
(ASPR’s) ,  but  only  those  which  provide 
“*  *  •  for  the  operation  by  or  on  be¬ 
half  of  the  agency  of  a  system  of  records 
to  accomplish  an  agency  function  *  *  *” 
are  subject  to  the  requirements  of  the 
subsection.  While  the  contract  need  not 
have  as  its  sole  purpose  the  operation 
of  such  a  system,  the  contract  would  nor¬ 
mally  provide  that  the  contractor  oper¬ 
ate  such  a  system  formally  as  a  specific 
requirement  of  the  contract.  There  may 
be  some  other  instances  when  this  pro¬ 
vision  will  be  applicable  even  though  the 
contract  does  not  expressly  provide  for 
the  operation  of  a  system;  e.g.,  where 
the  contract  can  be  performed  only  by 
the  operation  of  a  system.  The  re¬ 
quirement  that  the  contract  provide  for 
the  operation  of  a  system  was  intended 
to  ease  administration  of  this  provision 
and  to  avoid  covering  a  contractor’s  sys¬ 
tem  used  as  a  result  of  his  management 
discretion.  For  example,  it  was  not  in¬ 
tended  that  the  system  of  personnel 
records  maintained  by  large  defense  con¬ 
tractors  be  subject  to  the  provisions  of 
the  Act. 

Not  only  must  the  terms  of  the  con¬ 
tract  provide  for  the  operation  (as  op¬ 
posed  to  design)  of  such  a  system,  but  the 
operation  of  the  system  must  be  to  ac¬ 
complish  an  agency  function.  This  was 
intended  to  limit  the  scope  of  the  cover¬ 
age  to  those  systems  actually  taking 
the  place  of  a  Federal  system  which,  but 
for  the  contract,  would  have  been  per¬ 
formed  by  an  agency  and  covered  by  the 
Privacy  Act.  Information  pertaining  to 
Individuals  may  be  maintained  by  an 
agency  (according  to  subsection  (e)(1)) 
only  if  such  information  is  relevant  and 
necessary  to  a  purpose  of  the  agency 
required  to  be  accomplished  by  statute  or 
Executive  order  of  the  President.  Al¬ 
though  the  statute  or  Executive  order 
need  not  specifically  require  the  creation 
of  a  system  of  records  from  this  informa¬ 
tion,  the  operation  of  a  system  of  records 
required  by  contract  must  have  a  direct 
nexus  to  the  accomplishment  of  a  statu¬ 
tory  or  Presidentially  directed  goal. 

If  the  contract  provides  for  the  opera¬ 
tion  of  a  system  of  records  to  accomplish 
an  agency  function,  then  “*  *  *  the 
agency  shall,  consistent  with  its  author¬ 


ity,  cause  the  requirements  of  this  sec¬ 
tion  to  be  applied  to  such  system.” 

The  clause  “•  •  •  consistent  with  its 
authority  *  *  *”  makes  it  clear  that  the 
subsection  does  not  give  an  agency  any 
new  authority  additional  to  what  it 
otherwise  uses.  The  subsection  clearly 
imposes  new  responsibilities  upon  an 
agency  but  does  not  confer  any  new 
authority  to  implement  it.  Although  the 
method  by  which  agencies  cause  the  re¬ 
quirements  of  the  section  to  be  applied 
to  systems  is  not  set  forth,  the  manner 
of  doing  so  must  be  consistent  with  the 
agency's  existing  authority.  The  method 
of  causing  was  envisioned  to  be  a  clause 
in  the  contract,  but  as  with  the  “Buy 
America”  provision  in  Government  con¬ 
tracts,  the  breach  of  the  clause  was  not 
necessarily  intended  to  result  in  a  ter¬ 
mination  of  the  contract.  In  addition, 
several  of  the  requirements  of  the  Privacy 
Act  are  simply  not  applicable  to  systems 
maintained  by  contractors,  and  this 
clause  was  a  method  of  indicating  that 
an  agency  was  not  required  to  impose 
those  new  standards.  Agencies  were  given 
some  discretion  in  determining  the  meth¬ 
od  or  methods  by  which  they  would  cause 
the  otherwise  applicable  requirements  to 
be  applied  to  a  system  maintained  under 
contract.  This  subsection  does  not  merely 
require  that  an  agency  include  provisions 
consistent  with  the  Privacy  Act  in  its 
contracts.  It  requires,  in  addition,  that 
the  agency  cause  the  requirements  of  the 
Act  to  be  applied,  limited  only^xy  its 
authority  to  do  so.  Because  of  thi^gency 
accountability — which  underlies  many  of 
the  provisions  of  the  Privacy  Act — there 
should  be  an  incentive  for  an  agency  to 
cause  its  contractors  who  are  subject  to 
this. subsection  to  apply  the  requirements 
of  the  section  in  a  manner  which  is  en¬ 
forceable.  Otherwise,  the  agencies  may 
end  up  performing  those  functions  in 
other  to  satisfy  the  activity  of  the  “cause” 
requirement. 

The  decision  as  to  whether  to  contract 
for  the  operation  of  the  system  or  to 
perform  the  operation  “in-house”  was 
not  intended  to  be  altered  by  this  subsec¬ 
tion.  Furthermore,  this  subsection  was 
not  intended  to  significantly  alter  GSA 
and  OMB  authority  under  the  Bx-ooks 
Act  (P.L.  89-306)  or  Executive  Order  No. 
11717  dated  May  9,  1973,  concerning  the 
method  of  ADP  procurement.  The  prin¬ 
ciples  concerning  reliance  upon  the  pri¬ 
vate  sector  in  OMB  Circular  No.  A-76, 
and  related  provisions  were  also  not 
intended  to  be  changed. 

The  provisions  would  apply  to  all  sys¬ 
tems  of  records  where,  for  example — 

The  determinations  on  benefits  are 
made  by  Federal  agencies; 

The  records  are  maintained  for  admin¬ 
istrative  functions  of  the  Federal  agency 
such  as  personnel,  payroll,  etc;  or 

Health  records  being  maintained  by  an 
outside  contractor  engaged  to  provide 
health  services  to  agency  personnel. 

The  provisions  would  not  apply  to  sys¬ 
tems  of  records  where : 

Records  are  maintained  by  the  con¬ 
tractor  on  individuals  whom  the  con¬ 
tractor  employs  in  the  process  of  pro¬ 
viding  goods  and  services  to  Federal 
government. 


An  agency  contracts  with  a  state  or 
private  educational  organization  to  pro¬ 
vide  training  and  the  records  generated 
on  contract  students  pursuant  to  their 
attendance  (admission  forms,  grade  re¬ 
ports)  are  similar  to  those  maintained 
on  other  students  and  are  commingled 
with  their  records  on  other  students. 

When  a  system  of  records  is  to  be 
operated  by  a  contractor  on  behalf  of  an 
agency  for  an  agency  function,  the  con¬ 
tractual  instrument  must  specify,  to  the 
extent  consistent  with  the  agency’s  au¬ 
thority  to  require  it,  that  those  records 
be  maintained  in  accordance  with  the 
Act.  Agencies  will  modify  their  procure¬ 
ment  procedures  and  practices  to  ensure 
that  all  contracts  are  reviewed  before 
award  to  determine  whether  a  system  of 
records  within  the  scope  of  the  Act  is 
being  contracted  for  and,  if  so,  to  include 
appropriate  language  regarding  the 
maintenance  of  any  such  systems. 

For  systems  operated  under  contracts 
awarded  on  or  after  September  27,  1975, 
contractor  employees  may  be  subject  to 
the  criminal  penalties  of  subsections  (i) 
(1)  and  (2)  (for  disclosing  records  the 
disclosure  of  which  is  prohibited  by  the 
Act  or  for  failure  to  publish  a  public 
notice).  Although  the  language  is  not 
clear  on  this  point,  it  is  arguable  that 
such  criminal  liability  only  exists  to  the 
extent  that  the  contractual  instrument 
has  stipulated  that  the  provisions  of  the 
Act  are  to  be  applied  to  the  contractually 
maintained  system.  However,  an  agency 
which  fails,  within  the  limits  of  its  au¬ 
thority,  to  require  that  systems  operated 
on  its  behalf  under  contracts,  may  be 
civilly  liable  to  individuals  injured  as  a 
consequence  of  any  subsequent  failure 
to  maintain  records  in  conformance 
with  the  Act.  The  reference  to  contrac¬ 
tors  as  employees  is  intended  only  for 
purposes  of  the  requirements  of  the  Act 
and  not  to  suggest  that,  by  virtue  of  this 
language,  they  are  employees  for  any 
other  purposes. 

Subsection  (n)  Mailing  Lists 

Section  (n)  “An  individual’s  name  and 
address  may  not  be  sold  or  rented  by  an 
agency  unless  such  action  is  specifically 
authorized  by  law.  This  provision  shall 
not  be  construed  to  require  the  withhold¬ 
ing  of  names  and  addresses  otherwise 
permitted  to  be  made  public.” 

The  language  in  this  section  is  sus¬ 
ceptible  of  various  interpretations  and 
must  be  read  in  the  context  of  relevant 
legislative  history.  It  is  clear,  however, 
that  this  provision  seeks  to  reach  the  sale 
or  rental  of  lists  of  names  and  addresses 
for  commercial  or  other  solicitation  pur¬ 
poses  not  related  to  the  purposes  for 
which  the  information  was  collected. 

Language  included  in  the  legislation  would 
prohibit  the  sale  or  rental  of  mailing  lists, 
names  and  addresses,  by  Federal  agencies 
maintaining  them.  The  philosophy  behind 
this  amendment  is  that  the  Federal  Govern¬ 
ment  is  not  in  the  mailing  list  business,  and 
it  should  not  be  Federal  policy  to  make  a 
profit  from  the  routine  business  of  govern¬ 
ment,  particularly  when  the  release  of  such 
lists  has  been  authorized  under  the  Freedom 
of  Information  Act.  In  other  words,  such  lists 
can  not  be  withheld  by  an  agency,  unless  it 
determines  that  the  release  would  constitute 
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a  clearly  unwarranted  Invasion  of  privacy 
under  section  552(b)(6)  of  title  5,  United 
States  Code. 

Thus,  the  language  of  the  bill  before  us 
does  not  ban  the  release  of  such  lists  where 
either  sale  or  rental  Is  not  involved.  (Con¬ 
gressional  Record,  December  18,  1974,  p. 
H12246). 

While  the  reference  to  the  FOIA  speaks 
only  of  “a  clearly  unwarranted  invasion 
of  personal,  privacy”  (see  5  U.S.C.  552 
(b)  (6) )  agencies  may  presumably  with¬ 
hold  lists  of  names  and  addresses  from 
the  public  under  any  of  the  exemptions  to 
the  FOIA  (5  U.S.C.  552(b) )  when  they 
deem  it  appropriate  to  do  so. 

It  is  apparent  that  what  is  prohibited  - 
is  “sale  or  rental”  of  such  lists  and  the 
language  may  be  read  to  prohibit  “the 
sale  or  rental  of  lists  of  names  and  ad¬ 
dresses  by  Federal  agencies  unless  the 
sale  or  rental  is  specifically  authorized  by 
law.  [emphasis  added].”  (Senate  Report 
93-1183,  p.  31) 

The  Senate  report,  when  read  in  com¬ 
bination  with  the  House  floor  discussion 
cited  above,  suggests  that  agencies  may 
not  sell  or  rent  mailing  lists  for  commer¬ 
cial  or  solicitation  purposes  unless  they 
are  authorized  specifically  by  law  to  sell 
or  rent  such  lists.  It  is  equally  apparent 
that  this  language  in  no  way  creates  an 
authority  to  withhold  any  records  other¬ 
wise  required  to  be  disclosed  under  the 
Freedom  of  Information  Act  (5.  iJ.S.C. 
552) .  It  is  problematic  whether  the  lan¬ 
guage  “may  not  be  sold  or  rented”  pre¬ 
cludes  the  changing  of  fees  authorized 
under  the  Freedom  of  Information  Act. 
It  would  seem  reasonable  to  conclude 
that  fees  permitted  to  be  charged  for 
materials  required  to  be  disclosed  under 
the  Freedom  of  Information  Act  are  not 
precluded  and  that  lists,  such  as  agency 
telephone  directories,  which  are  cur¬ 
rently  sold  to  the  public  by  the  Superin¬ 
tendent  of  Documents  can  continue  to 
be  sold. 

Finally,  this  provision  appears  not  to 
have  been  intended  to  reach  the  disclo¬ 
sure  of  names  and  addresses  to  agencies 
or  other  organizations  other  than  for 
commercial  or  solicitation  purposes. 
Other  disclosure  (e.g.,  the  disclosures  of 
names  and  addresses  for  a  statistical 
study  or  to  issue  checks)  would  be  sub¬ 
ject  to  the  requirements  of  section  (b) . 
Section  (o)  Report  on  New  Systems 
Section  (o)  “Each  agency  shall  pro¬ 
vide  adequate  advance  notice  to  Con¬ 
gress  and  the  Office  of  Management  and 
Budget  of  any  proposal  to  establish  or 
alter  any  system  of  records  in  order  to 
permit  an  evaluation  of  the  probable  or 
potential  effect  of  such  proposal  on  the 
privacy  and  other  personal  or  property 
rights  of  individuals  or  the  disclosure  of 
information  relating  to  such  individuals, 
and  its  effect  on  the  preservation  of  the 
constitutional  principles  of  federalism 
and  separation  of  powers.” 

This  subsection  is  Intended  to  assure 
that  proposals  to  establish  or  modify  sys¬ 
tems  of  records  are  made  known  in  ad¬ 
vance  so  that 


There  is  a  basis  for  monitoring  the 
development  or  expansion  of  agency 
record-keeping  activity. 

The  Commission  established  by  section 
5  can  review  trends  in  the  use  of  personal 
information  and  the  application  of  tech¬ 
nology. 

This  provision  resulted  from  the  dis¬ 
cussions  surrounding  the  need  for  an  in¬ 
dependent  agency  to  regulate  and  oversee 
the  implementation  of  the  Act: 

The  compromise  amendment  still  would 
require  that  agencies  provide  adequate  ad¬ 
vance  notice  to  the  Congress  and  to  the 
Office  of  Management  and  Budget  of  any 
proposal  to  establish  or  alter  a  system  of 
records  In  order  to  permit  an  evaluation  of 
the  privacy  Impact  of  that  proposal.  In  addi¬ 
tion  to  the  privacy  Impact,  consideration 
should  be  given  to  the  effect  the  proposal 
may  have  on  our  Federal  system  and  on  the 
separation  of  powers  between  the  three 
branches  of  government.  These  concerns  are 
expressed  in  connection  with  recent  pro¬ 
posals  by  the  General  Services  Administra¬ 
tion  and  Department  of  Agriculture  to  estab¬ 
lish  a  giant  data  facility  for  the  storing  and 
sharing  of  information  between  those  and 
perhaps  other  departments.  The  language  in 
the  Senate  report  reflects  the  concern  at¬ 
tached  to  the  Inclusion  of  this  language  In 
S.3418.  (Senate  Report  93-1183,  page  64-66). 

The  acceptance  of  the  compromise  amend¬ 
ment  does  not  question  the  motivation  or 
need  for  improving  the  Federal  government's 
data  gathering  and  handling  capabilities.  It 
does  express  a  concern,  however,  that  the 
office  charged  with  central  management  and 
oversight  of  Federal  activities  and  the  Con¬ 
gress  have  an  opportunity  to  examine  the 
Impact  of  new  or  altered  data  systems  on  our 
citizens,  the  provisions  for  confidentiality 
and  security  In  those  systems  and  the  ex¬ 
tent  to  which  the  creation  of  the  system  will 
alter  or  change  Interagency  or  Intergovern¬ 
mental  relationships  related  to  Information 
programs.  (Congressional  Record,  Decem¬ 
ber  17,  1974,  p.  S  21818) 

A  report  is  required  to  be  submitted 
for  each  proposed  new  system  of  records 
and  for  changes  to  existing  systems.  The 
criteria  for  determining  what  constitutes 
a  change  in  an  existing  system  requiring 
the  preparation  of  a  report  under  this 
subsection  are  substantially  the  same  as 
those  discussed  under  subsection  (e)  (4) , 
the  public  notice:  namely  any  change 
which : 

Increases  the  number  or  types  of  in¬ 
dividuals  on  whom  records  are  main¬ 
tained; 

Expands  the  type  or  amount  of  infor¬ 
mation  maintained; 

Increases  the  number  or  categories  of 
agencies  or  other  persons  who  may  have 
access  to  those  records; 

Alters  the  manner  in  which  the  records 
are  organized  so  as  to  change  the  nature 
or  scope  of  those  records;  e.g.,  the  com¬ 
bining  of  two  or  more  existing  systems; 

Modifies  the  way  in  which  the  system 
operates  or  its  location  (s)  in  such  a 
manner  as  to  alter  the  process  by  which 
individuals  can  exercise  their  rights 
under  the  Act;  e.g.,  to  seek  access  or  re¬ 
quest  amendment  of  a  record;  or 

Changes  the  equipment  configuration 
on  which  the  system  is  operated  so  as  to 
create  the  potential  for  greater  access; 
e.g.,  adding  a  telecommunications  capa¬ 
bility. 

The  reports  required  under  this  sec¬ 
tion  are  to  be  submitted  to  the  Congress, 


to  the  Director  of  the  Office  of  Manage¬ 
ment  and  Budget  (Attn:  Information 
Systems  Division)  and  to  the  Privacy 
Protection  Study  Commission. 

The  Office  of  Management  and  Budget 
will  issue,  under  separate  cover,  more  de¬ 
tailed  guidance  on  the  format,  timing, 
and  content  of  the  reports. 

Subsection  (p)  Annual  Report 

Subsection  (pi)  “The  President  shall 
submit  to  the  Speaker  of  the  House  and 
the  President  of  the  Senate,  by  June  30 
of  each  calendar  year,  a  consolidated  re¬ 
port,  separately  listing  for  each  Federal 
agency  the  number  of  records  contained 
in  any  system  of  records  which  were  ex¬ 
empted  from  the  application  of  this  sec¬ 
tion  under  the  provisions  of  subsections 
(j)  and  (k)  of  this  section  during  the 
preceding  calendar  year,  and  the  reasons 
for  the  exemptions,  and  such  other  in¬ 
formation  as  indicates  efforts  to  ad¬ 
minister  fully  this  section.” 

This  subsection  provides  that  the 
President  submit  to  the  Congress  a  list  of 
systems  exempted  from  the  Act  under  the 
terms  of  section  (j)  or  (k).  “Also  to  be 
included  in  the  annual  report  would  be 
the  reasons  for  such  exemptions  and 
other  information  indicating  efforts  to 
comply  with  the  law.  It  is  hoped  that  all 
such  information  would  be  made  public. 
If,  however,  the  nature  of  any  such  ex¬ 
emption  requires  a  security  classification 
marking,  it  should  be  placed  in  a  separate 
part  of  the  report  so  as  not  to  affect  the 
remainder  of  the  annual  report.”  (House 
Report  93-1416,  p.  21.) 

Agencies  will  be  required  to  prepare 
reports  to  the  Office  of  Management  and 
Budget  (Attn:  Information  Systems  Di¬ 
vision)  by  April  30  of  each  year  (begin¬ 
ning  April  30, 1976)  covering  their  activi¬ 
ties  under  the  Act  during  the  preceding 
calendar  year.  The  Office  of  Management 
and  Budget  will  analyze  data  contained 
in  the  agency  reports  and  prepare  the 
required  Presidential  report  to  the  Con¬ 
fess.  The  information  required  in  the 
individual  agency  reports  will  include  not 
only  the  minimum  information  required 
for  inclusion  in  the  report  to  Congress 
but  also  such  information  as  is  needed  to 
evaluate  the  overall  effectiveness  of  the 
Privacy  Act  implementation,  identify 
areas  in  which  implementing  policies  or 
procedures  should  be  changed,  and  assess 
the  impact  of  Federal  data  management 
activities. 

Agency  reports  shall  include  but  not  be 
limited  to  the  following: 

Summary — A  brief  management  sum¬ 
mary  of  the  status  of  actions  taken  to 
comply  with  the  Act,  the  results  of  these 
efforts,  any  problems  encountered  and 
recommendations  for  any  changes  in  leg¬ 
islation,  policies  or  procedures. 

Accomplishments — A  summary  of  ma¬ 
jor  accomplishments ;  i.e.,  improvements 
in  agency  information  practices  and 
safeguards. 

Plans — A  summary  of  major  plans  for 
activities  in  the  upcoming  year,  e.g.,  area 
of  emphasis,  additional  securing  of  fa¬ 
cilities  planned. 

Exemptions — A  list  of  systems  which 
are  exempted  during  the  year  from  any 
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of  the  operative  provisions  of  this  law 
permitted  under  the  terms  of  subsections 
(j)  and  (k),  whether  or  not  the  exemp¬ 
tion  was  obtained  during  the  year,  the 
number  of  records  in  each  system  ex¬ 
empted  from  each  specific  provision  and 
reasons  for  invoking  the  exemption. 

Number  of  systems — A  brief  summary 
of  changes  to  the  total  inventory  of  per¬ 
sonal  data  systems  subject  to  the  provi¬ 
sions  of  the  Act  including  reasons  for 
major  changes;  e.g.  the  extent  to  which 
review  of  the  relevance  of  an  necessity 
for  records  has  resulted  in  elimination 
of  all  or  portions  of  systems  of  records 
or  any  reduction  in  the  number  of  in¬ 
dividuals  on  whom  records  are  main¬ 
tained.  Agencies  will  also  be  requested  to 
provide  OMB  with  a  detailed  listing  of  all 
their  systems  of  records,  the  number  of 
records  In  each  and  certain  other  data 
to  facilitate  oversight  of  the  Imple¬ 
mentation  of  the  Act.  (Detailed  report¬ 
ing  procedures  will  be  issued  under 
separate  cover.) 


Operational  Experiences— A  general 
description  of  operational  experiences 
including  estimates  of  the  number  of  in¬ 
dividuals  (in  relation  to  the  total  num¬ 
ber  of  records  in  the  system)  requesting 
information  on  the  existence  of  records 
pertaining  to  them,  refusing  to  provide 
information,  requesting  access  to  their 
records,  appealing  initial  refusals  to 
amend  records,  and  seeking  redress 
through  the  courts. 

More  extensive  data  will  be  requested 
on  those  cases  where  the  agency  was  un¬ 
able  to  comply  with  the  requirements  of 
the  Act  or  these  quidelines;  e.g.,  access 
was  not  granted  or  a  request  to  amend 
could  not  be  acknowledged  within  pre¬ 
scribed  time  limits. 

More  detailed  instructions  on  the 
format,  content  and  timing  of  these  re¬ 
ports  will  be  issued  by  OMB. 
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Section  (q)  Effect  of  Other  Law's 
Subsection  (q)  “No  agency  shall  rely 
on  any  exemption  contained  in  section 
552  of  tills  title  to  withhold  from  an  in¬ 
dividual  any  record  which  is  otherwise 
accessible  to  such  individual  under  the 
provisions  of  this  section.” 

This  provision  makes  it  explicit  that 
an  individual  may  not  be  denied  access 
to  a  record  pertaining  to  him  under  sub¬ 
section  (d)(1),  access  to  records,  because 
that  record  is  permitted  to  be  withheld 
from  members  of  the  public  under  the 
Freedom  of  Information  Act.  The  only 
grounds  for  denying  an  individual  access 
to  a  record  pertaining  to  him  are  the 
exemptions  stated  in  this  Act,  subsec¬ 
tions  (j)  and  (k),  and  subsection  (1) 
archival  records.  In  addition  considera¬ 
tion  may  have  to  be  given  to  other  statu¬ 
tory  provisions  which  may  govern  spe¬ 
cific  agency  records. 
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